DevSecOps (1471)

Zapata Technology•Sterling, VA

About The Position

The DevSecOps Engineer is part of a skilled IT team and works independently and collaboratively with other engineers to identify and test potential enhancements and resolve technical issues, taking prototypes through User Acceptance Testing (UAT) and into an air-gapped customer enclave. The role supports work across company contracts and projects, applying technical skills to new challenges and opportunities. The engineer performs software integration, infrastructure management, and application delivery. Work includes developing tools for document ingestion, normalization, segmentation, classification-marking extraction, similarity scoring, and search indexing with document-level access control. The position also develops content conversion and permission-preserving migration tools, and validates migrations end to end and at scale. The role packages and deploys applications with Helm and Kubernetes and delivers container images for an air-gapped Podman environment. This includes offline dependency closures, hardened base images, software bills of materials (SBOMs), image signing, and CVE remediation. The engineer helps maintain the security posture of tools handling classified data through fail-closed access control, mTLS and PKI-based identity, tamper-evident audit logging, and test suites. This is a full-time position with customer core support hours of 9 a.m.–5 p.m. EST, Monday through Friday. Less than 5% travel is expected. A Top Secret SCI clearance is required.

Requirements

Knowledge of containerization and container orchestration, including networking, using Docker, Podman, and Kubernetes.
Experience delivering software into air-gapped or disconnected environments.
Proficiency in TypeScript or JavaScript on Node.js and in Java with Maven.
Comfort with Shell scripting.
Experience with document parsing and data conversion for DOCX, XLSX, PDF, XML, and JSON, and with regular expressions, including repairing malformed input.
Experience with a search engine such as OpenSearch or Elasticsearch, including index provisioning and role-based or document-level security.
Linux system administration knowledge, including command-line use, service management, and software configuration within virtual machine constraints.
Excellent verbal and written communication skills.
Professional manner and a strong ethical code.
Exceptional time management and ability to multitask.
A bachelor’s degree and 6 years of experience performing similar or related work are required. The posting states that four years of experience may be substituted for a bachelor’s degree and that two years’ experience may be substituted for a degree.
Top Secret SCI clearance is required.
Ability to work 9 a.m.–5 p.m. EST Monday through Friday during the customer’s core support hours.

Nice To Haves

Experience developing Atlassian Confluence Data Center plugins (P2/OSGi, Spring, Atlassian SDK), including support for multiple Confluence versions.
Experience administering or extending MediaWiki, including configuration, PHP extensions, and skin theming.
Experience with classification marking standards and handling classified or controlled documents.
Experience with OCR and document layout analysis tools such as Docling or Tesseract, and evaluating them for constrained environments.
Experience with PKI, mTLS, step-ca, Keycloak, or OAuth2 proxies for per-user identity in Kubernetes.
Experience profiling and tuning applications at scale, including hundreds of thousands of documents and thousands of wiki spaces.
Familiarity with Python and PowerShell.

Responsibilities

Perform software integration tasks, including systems analysis, requirements gathering, scripting, testing, and documentation.
Participate directly in customer requirements sessions and user acceptance testing; translate feedback into tracked issues and delivered fixes.
Use source code control to track and safeguard changes and apply software updates.
Design, develop, and maintain tools for document ingestion, structure normalization and segmentation, classification-marking extraction, similarity scoring, and search indexing with document-level access control.
Devise solutions when prior documentation is limited.
Develop and maintain tools for content conversion, user and group mapping, and permission-preserving migration.
Validate migrations end to end and at scale.
Manage infrastructure, including designing and implementing scalable deployments across multiple networks using DevSecOps practices.
Package and deploy applications with Helm and Kubernetes and deliver container images for Podman air-gap deployment, including offline dependency closures, hardened base images, SBOMs, image signing, and CVE remediation.
Document infrastructure creation, management, and decommissioning procedures.
Uphold the security posture of tools that handle classified data, including fail-closed access control, mTLS and PKI-based identity, tamper-evident audit logging, and test suites.
Collaborate across the organization on company contracts and projects.
Perform additional duties as assigned.