DevSecOps Engineer
About The Position
MAG is recruiting for a DevSecOps Engineer who will enable rapid, secure delivery of tactical capabilities through world-class automation. You'll build the infrastructure and pipelines that allow a small team to deliver like a large organization while maintaining security in contested environments. This is a Hybrid Position - Remote mainly - but as well on call to come into a MAG office when requested. We are seeking candidates who live in proximity to our corporate HQ in Fairfax, VA primarily but will entertain persons living near our satellite offices in: Aberdeen, MD - Titusville, FL - Newport News, VA - Carthage NC. Must be eligible for Secret security clearance. Must be a US citizen. You automate everything that can be automated. You treat infrastructure as code, not clickops. You build security into pipelines, not bolt it on after. You can work across cloud, on-prem, and edge environments. You measure success by how little manual work the team does.
Requirements
- 5+ years DevOps/DevSecOps experience
- Expert-level knowledge of CI/CD platforms (Azure DevOps, GitLab CI, Jenkins)
- Experience with artifact repositories (e.g., JFrog Artifactory, Sonatype Nexus, Azure Artifacts, to include Azure Container Registry) for managing diverse package types
- Strong scripting skills (Python, Bash, PowerShell)
- Extensive experience with containerization (Docker, Podman) and orchestration (Kubernetes)
- Proficiency with IaC tools (Terraform, Ansible, Pulumi)
- Experience with cloud platforms (Azure required, AWS/GCP beneficial)
- Understanding of security scanning tools and practices
- Experience with monitoring stacks (Prometheus, Grafana, ELK)
- Knowledge of Git workflows and version control best practices
- US Citizens Only
- Former US Defense Contractor / US Gov / US Military Experience Only
Nice To Haves
- Experience with embedded system CI/CD and cross-compilation
- Knowledge of military software development processes
- Familiarity with RMF and security authorization processes
- Experience with air-gapped and classified environments
- Understanding of supply chain security and SBOM
- Kubernetes certifications (CKA, CKS)
- Experience with chaos engineering and resilience testing
- Familiarity with Policy-as-Code (PaC) tools like Open Policy Agent (OPA) for automating governance and security checks
Responsibilities
- Design and implement CI/CD pipelines for multi-architecture deployments
- Develop Infrastructure as Code (IaC) for hybrid cloud/edge environments
- Implement container orchestration for resource-constrained platforms
- Create automated testing frameworks (unit, integration, security, performance)
- Build observability solutions (metrics, logging, tracing, profiling)
- Develop GitOps workflows for configuration management
- Optimize build processes for embedded and edge platforms
- Implement security scanning in CI/CD pipelines (SAST, DAST, dependency scanning)
- Automate compliance validation (STIG, RMF controls)
- Design and implement secrets management solutions
- Create security monitoring and incident response automation
- Support security documentation and authorization packages
Benefits
- Professional development and conference attendance support
- Flexible work arrangements with occasional field exercises
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
