DevSecOps Engineer: HSV-26144

deciBel Research•Colorado Springs, CO

2d•Hybrid

About The Position

The successful candidate will understand system requirements and design, implement, and maintain DevOps solutions using modern tools to enable efficient, secure, and repeatable software development and delivery for the Missile Defense Agency's (MDA's) Threat Modeling Center (TMC) at Schriever Space Force Base in Colorado Springs. Duties include: Design, implement, and maintain CI/CD pipelines to support frequent, reliable software delivery. Automate infrastructure deployment, scaling, and management using configuration management and scripting tools. Implement and manage containerization technologies (e.g., Docker, Podman), including rootless vs. rootful configurations where appropriate Collaborate closely with development and test teams to improve build, integration, and deployment processes Integrate automated testing and quality/security tools (e.g., static analysis, code quality, coverage) into CI/CD pipelines. Monitor system and pipeline performance and implement improvements to ensure reliability and availability. Ensure security, compliance, and configuration baselines are implemented and maintained across environments. Work with identity and credential management tools (e.g., credential managers, service accounts) to support secure automation and access control.

Requirements

Bachelor's degree in a STEM (Science, Technology, Engineering or Mathematics) discipline
5+ years with a Bachelor's degree; 3+ years with a Master's degree; 1+ year with a PhD
Experience with containerization and container runtime technologies (Docker, Podman, or similar)
Experience with automated testing and software development pipelines/factories (e.g., unit, integration, or acceptance tests in CI/CD)
Experience deploying applications in containerized environments
Experience with CI/CD and related tools such as the Atlassian tool suite, Jira, GitHub, GitLab, SonarQube, Checkmarx, Coverity, or Jenkins
Hands-on experience with Unix/Linux operating systems
Active Secret security clearance
Must be a U.S. Citizen.

Nice To Haves

Strong experience with Linux administration, shell scripting, and operations in production-like environments
Experience implementing and maintaining automated software testing and analysis within CI/CD pipelines
Familiarity with hypervisors, virtualized medium- and high-trust environments (e.g., experience working with hypervisors on medium trust environments)
Experience working with credential and identity management solutions (e.g., credential managers, service accounts, Keycloak or similar technologies) to securely manage non-interactive access
Exposure to Kubernetes or infrastructure-as-code tools (e.g., Terraform, Ansible) is a plus
Experience developing software in a Model-Based Systems Engineering (MBSE) environment
Experience with Behavior-Driven Development (BDD) and tools such as Gherkin and Cucumber for automated acceptance testing

Responsibilities

Design, implement, and maintain CI/CD pipelines to support frequent, reliable software delivery.
Automate infrastructure deployment, scaling, and management using configuration management and scripting tools.
Implement and manage containerization technologies (e.g., Docker, Podman), including rootless vs. rootful configurations where appropriate
Collaborate closely with development and test teams to improve build, integration, and deployment processes
Integrate automated testing and quality/security tools (e.g., static analysis, code quality, coverage) into CI/CD pipelines.
Monitor system and pipeline performance and implement improvements to ensure reliability and availability.
Ensure security, compliance, and configuration baselines are implemented and maintained across environments.
Work with identity and credential management tools (e.g., credential managers, service accounts) to support secure automation and access control.