DevSecOps Engineer

CommIT Enterprises•North Charleston, SC

11d•Hybrid

About The Position

CommIT Enterprises, Inc. is seeking a DevSecOps Engineer to join the team in Charleston, SC, with remote options available. The DevSecOps Engineer will collaborate with software engineers to deploy and operate systems, automate and streamline operations and processes, and ensure infrastructure security. CommIT, established in 2001, is a Certified Veteran-Owned Small Business (CVOSB) providing innovative technical engineering and data science services. Their enterprise systems support includes the Department of Defense’s (DoD) GCSS-MC, CAC2S, TBMCS-MC, and the Department of Veteran’s Affairs’ (VA) telehealth communications. They offer services in acquisition management, systems engineering, Agile software development, cloud management, IT modernization, data analytics, cybersecurity, and training, with a focus on DevSecOps, automated testing, and mobile application development.

Requirements

Bachelor’s degree in Electrical/Electronics Engineering, Computer Science, Software Engineering, Computer Engineering, Mathematics or related IT discipline.
Master’s degree with 6 years of experience (or Bachelors with 8 years of experience) in Computer Science, Software Engineering, Computer Engineering, Mathematics or relevant field.
Degree may be substituted with additional relevant industry experience and / or industry accepted training and certification.
Strong proficiency with AWS services (EC2, VPC, IAM, S3, EKS/ECS, Lambda, CloudWatch, CloudTrail).
Experience with Docker, ECS, and EKS.
Experience with Python, Bash, or similar scripting languages.
Secret Clearance with the ability to obtain a T5.
Security+ CE certification.

Responsibilities

Build, enhance, and maintain DevSecOps pipelines and automation to support continuous integration, delivery, and security.
Develop, update, and govern infrastructure as code to support consistent, repeatable provisioning.
Build, secure, and operate containerized applications using Docker, ECS, and EKS.
Automate operational tasks, maintenance activities, and security workflows using Python, Bash, or similar scripting languages.
Conduct system monitoring, performance checks, and security compliance assessments across infrastructure and applications.
Troubleshoot incidents, perform log analysis, and execute root cause investigations to drive long-term stability.
Implement security controls, hardening standards, and best practices; maintain accurate and updated technical documentation.
Manage and support firewall systems, VPNs, DNS, and other key network security components.
Configure, tune, and optimize firewall rules and policies to ensure strong security posture and efficient traffic flow.
Monitor firewall logs and alerts, respond to security events, and perform patching, updates, and vulnerability remediation.
Responsible for developing the DevSecOps and Continuous Integration / Continuous Delivery (CI/CD) architecture of small systems or subsystems within a larger system.
Selects tools, technologies, and methodologies that support automated build, deployment, operation, security, and monitoring of systems.
Coordinates across cross-functional teams to remove impediments to CI/CD in order to accelerate capability delivery and increase the quality and reliability of the operational system.
Ultimately responsible for the DevSecOps architecture of the subsystem.
Serves as a Firewall SME by advising on, designing, and implementing firewall policies and integrations that align with DevSecOps workflows.
Ensures firewall configurations, rule sets, and security controls support automated deployment pipelines, secure network segmentation, and continuous monitoring.
Provides expert guidance on firewall tuning, change management, and incident response to maintain a secure and compliant operational environment.
Collaborates with network and security teams to ensure firewall capabilities are fully integrated into the subsystem’s DevSecOps architecture.