DevSecOps Engineer - JobID-0331

Innovative Defense Technologies•Fall River, MA

2d•$114,000 - $231,000•Onsite

About The Position

Innovative Defense Technologies (IDT) is hiring a mid-level DevSecOps Engineer for its Internal DevSecOps team. The team supports IDT software teams by maintaining a secure software factory and trusted DevSecOps environments, improving developer experience, and fostering collaboration and shared engineering practices. The role designs CI/CD systems, reusable Infrastructure as Code modules, automated security and compliance controls, and platform solutions that help teams deliver secure, compliant, high-quality software. The position is on-site, requiring at least three days in the office, at an IDT office in Arlington, Virginia; Mount Laurel, New Jersey; or Fall River, Massachusetts. Applicants must be able to obtain and maintain an active Secret U.S. Security Clearance. U.S. citizenship and travel up to 10% are required. The role calls for 5–7 years of post-graduation professional experience in a relevant engineering field and a bachelor's degree in a technical field or equivalent practical experience.

Requirements

5–7 years of professional post-graduation experience in DevSecOps, DevOps, Platform/Systems Engineering, or Software Engineering, with a strong emphasis on automation or platform administration.
Bachelor’s degree in Computer Science, Engineering, or a related technical field, or equivalent practical experience.
U.S. citizenship.
Ability to travel up to 10%.
Ability to obtain and maintain an active Secret U.S. Security Clearance.
Working knowledge of secure SDLC methodologies, such as Agile/Scrum, branching strategies, secure code reviews, automated linting, and release packaging.
Practical experience building and optimizing CI/CD pipelines using Jenkins or another CI/CD orchestrator, including shared libraries, declarative pipelines, or automated test hooks.
Practical experience orchestrating containerized workloads using Podman, Docker, or Kubernetes, including network configuration, container storage, and local registry synchronization.
Experience writing and modularizing Infrastructure as Code using Ansible, OpenTofu, or another automation technique.
Intermediate Python programming skills, such as writing API clients, custom scripts, or automation frameworks, and strong Linux/Unix Bash scripting skills.
Strong Git version-control skills, including branch strategies, merge conflict resolution, and Git Hooks or API-driven integrations.
Systems-level troubleshooting skills to diagnose root causes of operating system, container, or CI/CD pipeline issues.
Collaborative, enablement-focused approach, strong communication skills, and willingness to mentor junior engineers and help software teams resolve platform issues.

Nice To Haves

Experience designing SBOM auditing workflows or managing open-source license compliance, including GPL/LGPL risks.
Experience architecting or configuring high-performance local AI infrastructure, such as GPU clusters, vLLM orchestration, or vector databases like Qdrant, behind a VPN or in air-gapped environments.
Experience configuring pipeline diagnostics, usage telemetry, or observability stacks such as Prometheus, Grafana, or ELK.
Active Secret or Top Secret security clearance.
Practical experience applying DISA STIGs or preparing environments for CMMC audits.

Responsibilities

Design, architect, and optimize CI/CD pipelines using Jenkins, including reusable pipeline templates and shared components.
Automate security controls such as SAST, SCA, container scanning, SBOM generation, and secrets detection within pipelines.
Configure, scale, and secure the Software Factory platform, including GitLab, JFrog Artifactory, and SonarQube; manage setups, staging and testing clusters, and automated tool backups.
Design, modularize, and maintain Infrastructure as Code blueprints using Ansible and OpenTofu so engineering teams can provision environments and deployments.
Orchestrate and optimize containerized clusters using Podman, including securing cluster communications and managing local registry synchronization.
Deploy and harden DevSecOps platforms in secure, air-gapped environments by packaging and deploying dependencies, remediating environment-specific issues, and supporting repeatable delivery without external connectivity.
Collaborate with SECOPs teams to maintain DevSecOps platform compliance.
Translate DISA STIGs, NIST 800-171, and RMF controls into automated pipeline validation scripts and policy-as-code configurations.
Diagnose and remediate low-level system issues, including SELinux policy denials, pipeline token validation problems, and local network or VPN bottlenecks, and develop lasting fixes.
Analyze developer telemetry, feedback, and build metrics to reduce pipeline friction and improve developer experience.
Partner with software, security, and systems engineering teams to establish collaborative delivery patterns and guide developers on DevSecOps best practices.