DevSecOps Engineer - JobID-0030

Innovative Defense Technologies•Arlington, VA

36d•$74,000 - $150,000•Onsite

About The Position

Innovative Defense Technologies (IDT) is seeking a DevSecOps Engineer to join their team in Arlington, VA. IDT provides cloud-based integration, automated testing, and data analysis for U.S. Department of Defense (DoD) systems. The DevSecOps team is crucial for integrating security, automation, and operational practices into the software development lifecycle. They offer a standardized developer platform that includes CI/CD pipelines, security scanning, infrastructure automation, and developer tooling for both connected and classified environments. Some work will be performed in air-gapped environments, emphasizing the need for automation, repeatability, and disciplined processes. The role focuses on improving the developer experience, ensuring software for classified environments meets security and compliance requirements, contributing to a scalable Software Factory, and supporting engineers with reliable tooling and guidance.

Requirements

1+ years of professional software or technical experience
Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent professional experience
U.S. citizenship
Ability to travel up to 10%
Experience in software development processes
Experience with CI/CD concepts and tools (e.g., Jenkins, GitLab CI, CircleCI)
Familiarity with containerization technologies such as Podman and container orchestration with Kubernetes
Understanding of Infrastructure as Code (IaC) principles and tools (e.g., Terraform, Ansible)
Basic scripting and programming skills (e.g., Python, Bash)
Familiarity with version control systems, particularly Git
Strong problem-solving skills and the ability to work collaboratively within a team
Excellent communication skills and a desire to learn and grow
Must be able to obtain/maintain an active Secret U.S. Security Clearance.

Nice To Haves

Experience working in a DevSecOps or DevOps role
Hands-on experience with cloud platforms/hypervisors (e.g., AWS, vCenter)
Familiarity with secure software development practices and automated security testing tools
Knowledge of monitoring, logging, and alerting tools (e.g., Prometheus, Grafana, ELK Stack)
Experience working in defense, government, or other mission-critical domains.
Familiarity with DoD compliance frameworks such as NIST, DISA STIGs, or RMF

Responsibilities

Build, maintain, and troubleshoot CI/CD pipelines using tools such as GitLab CI and Jenkins, following established enterprise patterns.
Integrate and operate automated security controls within pipelines, including SAST, SCA, container scanning, SBOM generation, and secrets detection.
Support and maintain core Software Factory tooling (e.g., GitLab, artifact repositories, scanning tools, CI/CD infrastructure).
Develop and update Infrastructure as Code (IaC) using tools such as Ansible and Terraform, leveraging standardized templates.
Deploy, configure, and maintain containerized workloads using Podman and Kubernetes (RKE2 or similar distributions).
Operate and support DevSecOps platforms within air-gapped classified environments, including packaging and deploying dependencies, troubleshooting environment-specific issues, and supporting repeatable software delivery without external connectivity.
Assist in enforcing compliance requirements (e.g., NIST 800-171, DISA STIGs, RMF) through automation and pipeline controls.
Investigate and resolve technical issues across CI/CD pipelines, infrastructure, and tooling, documenting root causes and solutions.
Gather developer feedback and identify opportunities to improve platform usability, performance, and reliability.
Collaborate with software engineers, security teams, and infrastructure teams to support coordinated delivery efforts.