DevSecOps Engineer

540•Arlington, VA

12d•Onsite

About The Position

540 is seeking a DevSecOps Engineer to support a mission-critical platform that enables the Department of War to securely develop, deploy, and operate modern software capabilities. You will maintain the platform’s DevSecOps factory and automated pipelines across an environment built primarily in AWS, with some capabilities in Azure. Working with software engineering, cybersecurity, and operations teams, you will automate delivery processes, integrate security throughout the software development lifecycle, and help ensure that deployments are secure, reliable, and efficient. The ideal candidate enjoys solving pipeline issues, automating repeatable processes, and improving how software moves from development into production.

Requirements

4+ years of experience in DevSecOps, DevOps, platform engineering, cloud engineering, or a related field
Hands-on experience supporting AWS environments
Experience building and maintaining CI/CD pipelines
Experience with infrastructure-as-code tools such as Terraform, CloudFormation, or Ansible
Experience integrating automated security and code-quality tools into CI/CD workflows
Knowledge of Git-based source control, branching strategies, and release management
Experience with Docker, Kubernetes, and artifact-management tools such as Artifactory, Nexus, or GitLab Package Registry
Familiarity with monitoring, logging, and alerting tools
Proficiency in scripting and automation using Python, Bash, PowerShell, or a similar language
Understanding of secure software-development practices and the software development lifecycle
Strong troubleshooting, documentation, and cross-functional communication skills
Bachelor’s degree in Computer Science, Engineering, or a related technical field preferred; equivalent combinations of education and relevant experience will be considered
U.S. Citizens with an active DoW Secret (or higher) clearance

Nice To Haves

Working knowledge of Azure
Experience supporting DoW, federal, Advana, or other enterprise data environments
Familiarity with software supply-chain security, secrets management, or policy-as-code
Currently holds, or is willing to obtain within 30 days of employment, an approved certification such as Cloud+, GICSP, GSEC, Security+, or SSCP

Responsibilities

Build, operate, and maintain CI/CD pipelines using GitLab CI, GitHub Actions, Jenkins, or similar tools
Automate software builds, testing, security validation, artifact creation, and deployments
Support delivery and platform automation primarily in AWS, with additional support for Azure environments
Develop and maintain infrastructure as code to create secure, consistent, and repeatable environments
Integrate code, dependency, container, and infrastructure security scanning into automated pipelines
Implement automated quality and security gates to prevent vulnerable or noncompliant code from being deployed
Monitor pipeline health and performance, configure alerts, and troubleshoot build, integration, and deployment issues
Maintain source-code repositories, branching strategies, artifact management, versioning, and release processes
Support rolling, blue-green, and canary deployment strategies
Document pipeline configurations and operational procedures while identifying opportunities for continuous improvement