DevSecOps Engineer - JobID-0331

Innovative Defense Technologies•Mount Laurel Township, NJ

2d•$114,000 - $231,000•Onsite

About The Position

Innovative Defense Technologies (IDT) is seeking a mid-level DevSecOps Engineer for its internal DevSecOps team. The team supports IDT software teams by maintaining secure software factories and trusted DevSecOps environments, improving developer experience, and encouraging collaboration and shared engineering practices. The role designs and operates secure, compliant, high-quality software delivery platforms so teams can deliver prototypes, updates, and production releases independently and efficiently. The engineer will design CI/CD pipelines and reusable components, build Infrastructure as Code modules, automate security and compliance controls, and configure the Software Factory platform. The position also supports containerized clusters and platform deployments in secure, air-gapped environments, troubleshoots system and pipeline issues, and works with software, security, and systems engineering teams to improve delivery practices. This is an on-site position requiring at least three days in the office, based in Arlington, Virginia; Mount Laurel, New Jersey; or Fall River, Massachusetts. Applicants must be able to obtain and maintain an active Secret U.S. Security Clearance. Travel of up to 10% is required.

Requirements

5–7 years of professional post-graduation experience in DevSecOps, DevOps, Platform/Systems Engineering, or Software Engineering, with a strong emphasis on automation or platform administration.
Bachelor’s degree in Computer Science, Engineering, or a related technical field, or equivalent practical experience.
U.S. citizenship.
Ability to obtain and maintain an active Secret U.S. Security Clearance.
Ability to travel up to 10%.
Strong working knowledge of secure SDLC methodologies, such as Agile/Scrum, branching strategies, secure code reviews, automated linting, and release packaging.
Practical experience building and optimizing CI/CD pipelines using Jenkins or another CI/CD orchestrator.
Practical experience orchestrating containerized workloads using Podman, Docker, or Kubernetes, including network configuration, container storage, and local registry synchronization.
Experience writing and modularizing Infrastructure as Code using Ansible, OpenTofu, or another automation technique.
Intermediate Python programming skills and strong Linux/Unix Bash scripting skills.
Strong proficiency with Git, including branch strategies, merge-conflict resolution, and Git Hooks or API-driven integrations.
Systems-level troubleshooting skills to diagnose root causes of operating system, container, or CI/CD pipeline issues.
Collaborative, enablement-focused approach, strong communication skills, and willingness to mentor junior engineers and help software teams solve platform issues.

Nice To Haves

Experience designing SBOM auditing workflows or managing open-source license compliance, including GPL/LGPL risks.
Experience architecting or configuring high-performance local AI infrastructure, such as GPU clusters, vLLM orchestration, or vector databases such as Qdrant, behind a VPN or in air-gapped setups.
Experience configuring custom pipeline diagnostics, usage telemetry, or observability stacks such as Prometheus, Grafana, or ELK.
Active Secret or Top Secret security clearance and practical experience applying DISA STIGs or preparing environments for CMMC audits.

Responsibilities

Design, architect, and optimize CI/CD pipelines using Jenkins, including reusable pipeline templates and custom shared components.
Automate security controls such as SAST, SCA, container scanning, SBOM generation, and secrets detection within pipelines.
Configure, scale, and secure the Software Factory platform, including GitLab, JFrog Artifactory, and SonarQube; manage system setups, staging and testing clusters, and automated backups.
Design, modularize, and maintain Infrastructure as Code blueprints using Ansible and OpenTofu to enable repeatable environments and deployments.
Orchestrate and optimize containerized clusters using Podman, secure cluster communications, and manage local registry synchronization.
Deploy and harden DSO platforms in secure, air-gapped environments, including packaging and deploying dependencies, resolving environment-specific issues, and supporting repeatable delivery without external connectivity.
Collaborate with SECOPs teams to maintain DSO platform compliance.
Translate DISA STIGs, NIST 800-171, and RMF controls into automated pipeline validation scripts and policy-as-code configurations.
Diagnose and remediate low-level system issues, including SELinux policy denials, pipeline token validation issues, and local network or VPN bottlenecks, and define long-term fixes.
Analyze developer telemetry, feedback, and build metrics to reduce pipeline friction and improve developer experience.
Partner with software, security, and systems engineering teams to establish collaborative delivery patterns and guide developers on DSO best practices.