DevSecOps Engineer

General Dynamics Information Technology•Fort Bragg, NC

9d•Hybrid

About The Position

Iron EagleX, a wholly owned subsidiary of General Dynamics Information Technology, is seeking a DevSecOps Engineer to build, maintain, and enhance infrastructure supporting a modern microservice-based application platform. The engineer will work with software engineers, security teams, and platform stakeholders to automate and secure application building, testing, deployment, and operations across multiple environments. The role involves working across development and infrastructure, troubleshooting distributed systems, embedding security throughout the software delivery lifecycle, and helping teams deliver reliable, secure software with minimal operational complexity. This is an onsite/hybrid position at Fort Bragg, North Carolina, with three days onsite per week. A current Top Secret/SCI clearance and U.S. citizenship are required. The position calls for 8 or more years of related experience and a bachelor's degree in a related field or equivalent experience. Scheduled hours are 40 per week, with no travel required.

Requirements

Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, Information Technology, or a related field, or equivalent practical experience.
At least 3 years of experience in DevOps, DevSecOps, Site Reliability Engineering, Platform Engineering, or a related role.
At least 8 years of related experience, as stated in the role qualifications and success requirements.
Strong experience with Linux-based development and operational environments.
Strong experience with Docker and container-based application development.
Experience deploying and operating applications using Kubernetes.
Experience developing and maintaining Helm charts and Kubernetes manifests.
Experience building and maintaining CI/CD pipelines using GitLab CI/CD or similar platforms.
Experience with GitOps deployment practices and tools such as Argo CD.
Familiarity with container, dependency, and vulnerability scanning tools and software supply chain security practices.
Understanding of networking, TLS, DNS, ingress, service discovery, authentication, authorization, and secrets management in distributed systems.
Familiarity with observability technologies for logging, metrics, tracing, and application health monitoring.
Experience with Git-based development workflows and modern Agile/DevOps engineering practices.
Strong troubleshooting, automation, communication, and collaboration skills.
Current Top Secret/SCI clearance required.
U.S. citizenship required.
Able to work onsite at Fort Bragg, NC, three days per week.

Nice To Haves

Experience building and maintaining secure CI/CD pipelines that automate application builds, testing, security scanning, packaging, and deployment.
Experience developing containerized workflows and operating microservice-based applications across Docker and Kubernetes environments.
Experience implementing reusable Helm charts and GitOps deployment workflows using tools such as GitLab CI/CD and Argo CD.
Experience integrating vulnerability scanning, secrets management, policy enforcement, and other security controls throughout the software delivery lifecycle.
Experience collaborating with software engineers, security teams, and platform stakeholders to improve automation, observability, reliability, and operational readiness.

Responsibilities

Build, maintain, and improve CI/CD pipelines for automated application builds, testing, security scanning, packaging, and deployment.
Develop and maintain containerized development and deployment workflows using Docker.
Deploy, configure, and operate applications and supporting services in Kubernetes environments.
Develop and maintain Helm charts and reusable deployment configurations for microservices and platform components.
Implement and maintain GitOps-based deployment workflows using tools such as Argo CD.
Automate infrastructure, environment configuration, application deployment, and operational processes.
Integrate security controls and automated security testing into the software development lifecycle, including dependency, container, source code, and vulnerability scanning.
Work with engineering teams to identify and remediate vulnerabilities in application dependencies, container images, base images, and deployment configurations.
Support secure service-to-service communication, authentication, authorization, secrets management, and zero trust architecture patterns.
Improve platform observability through centralized logging, metrics, tracing, health monitoring, and alerting.
Troubleshoot application, container, Kubernetes, networking, and deployment issues across development and operational environments.
Work with developers to improve application deployability, reliability, configuration management, and operational readiness.
Maintain reusable platform tooling and documentation that simplifies common development and deployment workflows.
Participate in architecture and engineering reviews with emphasis on security, reliability, automation, and maintainability.