DevSecOps Engineer - Hybrid - 25679

Huntington Ingalls Industries • Virginia Beach, VA

42d • Hybrid

About The Position

Mission Technologies, a division of Huntington Ingalls Industries, is seeking a skilled DevSecOps Engineer to support the DNA23 program within the NSERC network boundary. This role is responsible for integrating security into the software development lifecycle, enhancing CI/CD pipelines, and managing Kubernetes environments deployed in Azure Kubernetes Service (AKS). It also includes supporting infrastructure as code (IaC), maintaining secure environments, and mentoring development teams on best practices. Impact / Why This Role Matters This role is central to maintaining the velocity and integrity of mission-critical software delivery. By embedding security into every phase of development and deployment, the DevSecOps Engineer ensures that our systems remain resilient, compliant, and scalable. Your work directly supports national defense initiatives by enabling secure, efficient, and automated infrastructure for the DNA23 program. What you will do As a DevSecOps Engineer, you'll embed security practices into development and deployment pipelines, conduct vulnerability assessments, and ensure compliance with DoD regulatory requirements. You'll design and maintain secure CI/CD pipelines, support onboarding and migration of projects into the DevSecOps environment, and promote automation of repeatable tasks. You'll also manage AKS Kubernetes clusters, including setup, scaling, patching, and performance tuning. This includes creating Helm charts and manifests, implementing automated deployments, and securing access controls and secrets. You'll develop infrastructure using tools like Terraform, CloudFormation, and Ansible, and maintain documentation in Confluence and other repositories. You'll also support architectural diagramming and DoDAF artifacts, and provide mentorship on secure coding practices.

Requirements

• Bachelors in related field and 2 years experience; OR
• Masters in related field (0 years experience); OR
• 6 years relevant experience with High School Diploma/Equivalent
• Familiarity with DevSecOps tools, such as GitLab, JFrog Artifactory, SonarQube, Fortify, Azure Container Registry/Storage, and Grafana Loki
• Working knowledge of DoD security frameworks, including STIGs and SRGs
• Understanding of database security concepts and proficiency in modern programming/scripting languages, including Python, Bash, YAML, JSON, and SQL
• Experience with monitoring and logging solutions, such as ELK Stack, Splunk, Loki, Prometheus, Grafana, and other SIEM platforms
• Must have a DoD 8570/8140 IAT Level II baseline certification (e.g., Security+ CE, CCNA-Security, CySA+, CND).
• Must be eligible for a CAC card
• U.S. citizenship required
• Must have a current or active DoD secret security clearance

Nice To Haves

• Prior experience supporting DoD programs in a DevSecOps capacity
• Experience with architectural documentation and DoDAF artifacts
• Familiarity with secure software development lifecycle (SDLC) practices
• Strong understanding of version control systems (Git)
• Experience with SAST, DAST, SCA, and container/infrastructure security scanning tools
• Proficiency in container technologies (Docker) and orchestration tools (Kubernetes, Helm)
• Experience with cloud platforms (AWS, Azure) and IaC tools (Terraform, CloudFormation, Ansible)

Responsibilities

• Embed security practices into development and deployment pipelines
• Conduct vulnerability assessments, scanning, and remediation
• Ensure compliance with DoD regulatory requirements and industry standards
• Implement and maintain security monitoring, logging, and alerting systems
• Design, implement, and maintain secure automated build, test, and deployment processes
• Support onboarding and migration of projects into the DevSecOps environment
• Promote automation of repeatable tasks and document pipeline architecture and procedures
• Design, deploy, and maintain AKS Kubernetes clusters
• Configure high availability, scalability, and fault tolerance
• Create and manage Helm charts and Kubernetes manifests
• Monitor deployments, troubleshoot issues, and optimize performance
• Implement access control, secrets management, and backup strategies
• Develop and maintain scalable infrastructure using Terraform, CloudFormation, or Ansible
• Document IaC templates and architectural diagrams
• Continuously assess and improve infrastructure performance and security
• Maintain documentation in Confluence and other repositories
• Create/modify DoDAF artifacts as needed
• Provide guidance to development teams on secure coding practices

Benefits

• We offer competitive benefits such as best-in-class medical, dental and vision plan choices; wellness resources; employee assistance programs; Savings Plan Options (401(k)); financial planning tools, life insurance; employee discounts; paid holidays and paid time off; tuition reimbursement; as well as early childhood and post-secondary education scholarships.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Transportation Equipment Manufacturing
• Number of Employees: 5,001-10,000 employees