DevSecOps Engineer - TS/SCI Clearance

CDW•Washington, VA

2d•$220,000 - $255,000•Onsite

About The Position

CDW is seeking a DevSecOps Engineer to build, secure, and maintain software delivery pipelines and supporting infrastructure for mission-focused applications. The role integrates security throughout the software development lifecycle and partners with development, cybersecurity, and operations teams to deliver reliable, compliant solutions. The position requires on-site work at a client location in a Sensitive Compartmented Information Facility (SCIF) in Seal Beach, California; Herndon, Virginia; or Satellite Beach, Florida. The engineer will follow applicable security procedures for classified systems, information handling, and facility access.

Requirements

Active TS/SCI clearance and ability to maintain required access for the client assignment.
Ability to work on-site in a SCIF at the client’s location in Seal Beach, CA; Herndon, VA; or Satellite Beach, FL.
Hands-on experience in DevSecOps, DevOps, software engineering, or infrastructure engineering, including production CI/CD implementation and support.
Proficiency with Linux administration and scripting or automation using languages such as Python, Bash, or PowerShell.
Experience with Git-based version control and CI/CD platforms such as GitLab CI, Jenkins, GitHub Actions, or Azure DevOps.
Experience with infrastructure-as-code and configuration-management tools such as Terraform or Ansible.
Experience with containers and orchestration technologies such as Docker, Kubernetes, or OpenShift.
Working knowledge of secure software development, vulnerability remediation, access control, secrets management, and software supply chain security.
Understanding of networking, system troubleshooting, and secure operation of enterprise infrastructure.
Ability to communicate technical issues clearly, document procedures, and collaborate across engineering and security teams.

Nice To Haves

Experience supporting classified, air-gapped, or disconnected environments.
Familiarity with RMF, ATO processes, STIG implementation, and NIST security control frameworks.
Experience with software bills of materials (SBOMs), artifact signing, policy as code, and automated compliance checks.
Experience supporting cloud, private-cloud, or hybrid infrastructure within an approved security boundary.
Relevant cybersecurity, cloud, Linux, or Kubernetes certifications.
Bachelor’s degree in computer science, engineering, cybersecurity, or a related field, or equivalent practical experience.

Responsibilities

Design, implement, and maintain CI/CD pipelines for applications deployed in restricted and classified environments.
Integrate security testing into delivery workflows, including static code analysis, dependency scanning, container scanning, and secrets detection.
Automate infrastructure provisioning, configuration management, and deployment using infrastructure as code and repeatable, version-controlled processes.
Build and support containerized applications and orchestration platforms, including secure configuration, image management, and deployment troubleshooting.
Harden operating systems, application platforms, and pipeline components in accordance with client baselines and Security Technical Implementation Guides (STIGs).
Support Risk Management Framework (RMF) and Authorization to Operate (ATO) activities by providing technical evidence, documenting controls, and tracking remediation.
Manage software artifacts and approved dependencies, including controlled promotion and transfer processes for disconnected or limited-connectivity environments.
Implement monitoring, logging, and alerting to improve system reliability, auditability, and incident response readiness.
Troubleshoot build, deployment, infrastructure, and security issues in collaboration with development, cybersecurity, and operations teams.
Maintain architecture documentation, operational runbooks, and recovery procedures while complying with classification and information-handling requirements.