DevSecOps Engineer

Booz Allen Hamilton•Beavercreek, OH

2d•$77,500 - $176,000•Hybrid

About The Position

The Opportunity: Today’s dynamic technology landscape demands constant and rapid innovation. To facilitate this transformation, we must ensure continuous integration and application development. That’s why we need you, an experienced DevOps engineer who’s eager to design, test, and program critical applications for our clients who need them most. Are you looking for an opportunity not just to automate pipelines, but to architect secure, compliant, cloud-ready developer platforms that have a direct impact in the defense industry? As a DevSecOps Engineer, you’ll lead end-to-end platform design—from build systems to deployment frameworks—for software operating inside ATO’d environments. Using agile lifecycle development and Git-based workflows, you’ll partner with engineering teams to enable scalable repos, secure CI/CD automation, and cloud infrastructure that meets rigorous accreditation requirements.

Requirements

5+ years of experience in the development of tools and processes to drive DevOps or DevSecOps maturity by automating builds, platform engineering, or secure software delivery in production systems
2+ years of experience implementing repo tooling with Nx or Turborepo
Experience building and operating CI/CD pipelines inside ATO’d or RMF-governed environments, including security control implementation
Experience with Docker, Kubernetes, and cloud platforms, such as AWS or Azure
Experience implementing supply-chain security, vulnerability scanning, and compliance gates
Knowledge of Git workflows, REST APIs, and automated testing frameworks
Ability to travel up to 25%
Ability to obtain a Secret clearance
Bachelor's degree or 8+ years of experience in DevOps in lieu of a degree

Nice To Haves

Experience creating and improving continuous automation across multiple technical stacks
Experience triaging and resolving issues related to both open source and commercial tools in public cloud environments
Experience with policy-as-code, such as OPA/Gatekeeper, OSCAL, or compliance automation
Experience with service meshes, hardened baselines, or advanced cloud security
Experience integrating DevSecOps practices with realtime or streaming systems
Knowledge of scripting languages such as Python or Linux Shell Script
Secret clearance
Master’s degree

Responsibilities

Design and maintain repo architecture using Nx or Turborepo, including incremental builds, caching, and task orchestration.
Architect secure CI/CD pipelines aligned with NIST 80053, RMF controls, STIG baselines, and continuous monitoring requirements in ATO’d environments.
Implement software supply-chain protections including SBOM generation, artifact signing, provenance, and vulnerability scanning.
Build and manage cloud-native platform infrastructure using Docker, Kubernetes, and Git-based workflows across AWS and Azure.
Establish logging, monitoring, and observability, such as OpenTelemetry, metrics, or audit trails that satisfy accreditation and audit readiness.
Integrate SAST/DAST, SCA, and compliance checks into automated pipelines; enforce security-by-design and configuration baselines.
Define patterns for secrets management, identity and access controls, and boundary protections for accredited systems.
Mentor engineers; review architectures and pipelines; champion SDLC best practices, release safety, and documentation.