DevSecOps Engineer

Applied Research Solutions • Norfolk, VA

1d • Onsite

About The Position

ARS is currently seeking skilled professionals with experience in the Department of Defense (DoD) sector for a DevSecOps Engineer role in Norfolk, VA. The role offers an excellent opportunity for individuals to support NATO’s Allied Command Transformation (ACT), the Alliance’s premier agent for change—driving, facilitating, and advocating continuous improvement of Alliance capabilities to maintain and enhance the military relevance and effectiveness of the Alliance. All roles will collaborate with ACT to provide appropriate support to NATO missions and operations; lead NATO military transformation; improve relationships, interaction, and cooperation with partners, nations, and international organizations. ACT leads concept development, capability development, training and lessons‑learned initiatives, and supports policy development within NATO. Why Work with Us? Applied Research Solutions (ARS) is a respected, world-class provider of technically integrated solutions. We deliver premier talent and technology across our focused markets to provide unparalleled, continuous mission support. We’ve been honored as a Best Places to Work nominee since 2020. At ARS, our career-driven, loyal professionals are the key to our success, enabling us to deliver state-of-the-art results for our mission partners. With an industry-competitive benefits package, awards and recognition programs, and direct access to ARS senior management, we are dedicated to the growth and well-being of every team member.

Requirements

• Minimum 4 years of experience with containerization and orchestration (Docker, Kubernetes, OpenShift).
• Minimum 4 years of experience in designing and maintaining CI/CD pipelines with automated testing and security validation.
• Experience with Infrastructure as Code (Terraform, Ansible, Helm, Pulumi).
• Experience deploying and securing workloads in hybrid/public cloud environments (AWS, Azure, Google Cloud, VMware, OpenStack).
• Experience implementing site reliability engineering and observability practices (Prometheus, Grafana, ELK/Loki, OpenTelemetry).
• NATO UNCLASSIFIED RFP-ACT-SACT-26-02 Experience implementing scalable, resilient, high-throughput systems and service-oriented architecture.
• Experience delivering capabilities in Agile/DevSecOps environments (Scrum, SAFe, Kanban).
• Experience designing and managing secure networking and service mesh (TLS, Istio, Linkerd, API gateways).
• Experience applying zero-trust principles and compliance automation (OPA, Kyverno, SBOM, CIS benchmarks).
• Experience managing secrets and access policies using modern IAM solutions (Vault, AWS KMS, Azure Key Vault, RBAC/ABAC).
• Security Clearance : Active Secret clearance is required to start. (All positions will require a NATO clearance as well).
• Citizenship : Must be a U.S. citizen.

Nice To Haves

• Prior DoD or similar government contract experience is strongly preferred.

Responsibilities

• Deploy and operate containerized services using orchestration frameworks to ensure scalability and resilience.
• Automate infrastructure through Infrastructure as Code (IaC) to provide consistent and repeatable environments.
• Deploy and monitor workloads in cloud environments (AWS, Azure, Google Cloud, VMware, OpenStack).
• Implement site reliability engineering (SRE) and observability practices to ensure resilience, monitoring, logging, metrics, and distributed tracing.
• Support high-throughput and service-oriented architectures, ensuring resilient and scalable deployments.
• Deliver incremental capabilities in Agile and DevSecOps environments following frameworks such as Scrum, SAFe, or Kanban.
• Design and manage secure networking and service meshes (TLS, Istio, Linkerd, API gateways) to ensure encrypted and reliable service-to-service communication.
• Apply zero-trust principles and compliance automation to enforce security policies and validate system compliance.
• Manage identity and access using secure methods for secrets, tokens, certificates, and least privilege access control.
• Will perform other duties as assigned.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed