DevSecOps Engineer II

Entarian • Washington, DC

2h

About The Position

Entarian is seeking a highly skilled Software Developer with deep DevSecOps expertise to support the design, integration, testing, deployment, cybersecurity, and sustainment of modern software applications across secure enterprise environments. The ideal candidate brings strong engineering discipline, a security‑first mindset, and experience operating within Agile and CI/CD‑driven ecosystems.

Requirements

• Bachelor’s degree in Computer Science or a related technical discipline, with 8+ years of progressive, hands-on experience in DevOps, Software Engineering, or a closely aligned discipline.
• Demonstrated experience as a Software Developer, DevOps Engineer, or similar role, preferably supporting federal agencies or government contracting environments with stringent security and compliance requirements.
• Expertise developing, maintaining, and optimizing CI/CD pipelines, enabling automated build, test, security scanning, and deployment workflows across multi-environment architectures.
• Proven ability to implement, monitor, analyze, remediate, and verify STIG (Security Technical Implementation Guide) findings, ensuring compliance with federal cybersecurity standards.
• Hands‑on experience with container orchestration and container technologies, including Kubernetes, OpenShift, Docker, and Helm charts, supporting mission‑critical workloads in secure environments.
• Advanced experience with Infrastructure as Code (IaC) and associated testing strategies, particularly using Terraform to provision, scale, and secure cloud and hybrid infrastructure.
• Proficiency with enterprise DevOps automation platforms such as Harness, Jenkins, and GitLab, with a strong understanding of CI/CD best practices, branching strategies, and pipeline governance.
• Experience using SAST tools (e.g., Fortify, SonarQube, Xray) to enforce secure coding standards and detect vulnerabilities early in the development lifecycle.
• Experience using DAST tools (e.g., OWASP ZAP) to continuously assess application security posture in dynamic runtime environments.
• Background in Site Reliability Engineering (SRE) practices, including reliability automation, SLIs/SLOs, service health monitoring, and production resilience engineering.
• Experience containerizing applications using OCI-compliant tools such as Docker, Buildah, apko, and applying secure containerization practices aligned with federal compliance.
• Demonstrated capability securing containerized environments, including applying image‑hardening controls, scanning dependencies, and enforcing runtime governance.
• High proficiency with Linux, including system administration, performance tuning, and shell environment management in production contexts.
• Proficiency in scripting languages such as Bash, Python, or comparable languages to automate operational workflows and integrate DevSecOps toolchains.
• Strong understanding of the complete Software Development Lifecycle (SDLC), including secure development practices, quality gates, and release management.
• Proven experience developing software in an Agile Scrum environment, collaborating with multidisciplinary teams to deliver iterative, high‑quality software.
• Experience with systems reliability, load balancing, monitoring, and logging, leveraging enterprise tools to maintain service health and ensure observability across distributed systems.
• Familiarity with Agile/Scrum methodologies, actively contributing to ceremonies, sprint planning, and continuous improvement initiatives.
• Excellent communication and collaboration skills, with the ability to interface effectively with both technical and non‑technical stakeholders, translating complex technical concepts into clear actionable insights.
• Must be able to provide proof of US Citizenship and have or are able to attain a Government Agency Suitability Clearance.

Nice To Haves

• Hands‑on experience with cyber, information security, and application security tools, including platforms such as Twistlock/Prisma Cloud Compute, SonarQube, Splunk, and similar technologies used for vulnerability detection, monitoring, and compliance enforcement.
• Proficiency in modern programming and scripting languages, including Groovy, Python, Spring Boot Java, and JavaScript, with the ability to develop automation, tooling, and secure application components.
• Demonstrated experience applying DevSecOps principles, integrating security throughout the CI/CD pipeline, and implementing automated scanning, compliance checks, and shift‑left security practices.
• Working knowledge of AWS cloud services, including RDS and other AWS databases, IAM identity and access management, and VPC networking, with the ability to design secure, scalable, cloud-native architectures.
• Strong understanding of Everything‑as‑Code methodologies, such as Infrastructure‑as‑Code, Configuration‑as‑Code, and Policy‑as‑Code, and familiarity with implementing automated governance, repeatable deployments, and environment consistency.

Responsibilities

• Design, develop, secure, and optimize CI/CD pipelines using industry‑leading orchestrator tools to enable automated builds, testing, security scanning, and deployments across multiple environments.
• Analyze, remediate, and verify Security Technical Implementation Guide (STIG) findings, working hands‑on with system stakeholders to ensure compliance, security hardening, and alignment with federal cybersecurity standards.
• Architect and implement scalable, reliable, and secure DevSecOps infrastructure, including version control systems, automated testing frameworks, and continuous monitoring solutions to support end‑to‑end delivery.
• Build and maintain automated deployment and configuration management workflows, leveraging containerization technologies (e.g., Docker, Kubernetes) to ensure consistent, repeatable, and secure deployments.
• Develop, document, and enforce engineering best practices for code quality, secure coding, dependency management, application performance, and compliance with federal regulatory and security requirements.
• Partner closely with cybersecurity teams to integrate continuous security controls into the pipeline, including automated vulnerability scanning, static/dynamic code analysis, dependency checks, and policy enforcement.
• Continuously enhance software development processes and procedures, ensuring alignment with evolving mission needs, technology updates, and federal security mandates.
• Support updates to unit and integration tests, ensuring the test suites and corresponding CI/CD pipelines remain reliable, comprehensive, and aligned with software updates and new feature development.
• Assist in establishing and maintaining application platform environments across development, test, staging, and pre‑production, ensuring proper configuration, monitoring, and performance tuning.
• Design, develop, maintain, and secure OCI‑compliant container images tailored for Kubernetes environments, ensuring compliance with DoD, DHS, or agency‑specific container hardening requirements.
• Develop Infrastructure as Code (IaC) (e.g., Terraform, CloudFormation, Ansible) to provision scalable, secure, cloud‑based environments and automate infrastructure lifecycle management.
• Support deployment of microservices to cloud or on‑premises Kubernetes platforms, ensuring resiliency, fault tolerance, advanced networking configuration, and policy‑based traffic management.
• Contribute to new development and continuous enhancement of existing applications, including security patches, feature development, and defect resolution, following Agile SCRUM ceremonies and workflows.

Benefits

• Entarian is an Equal Opportunity and Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level