DevSecOps Engineer

Galapagos Federal Systems LLC.

1d•$145,000 - $150,000

About The Position

Galapagos Federal Systems LLC is seeking a motivated and highly qualified DevSecOps Engineer to support the integration of development, security, and operations practices within a mission-critical Department of Defense (DoD) system. This role enables the continuous delivery of secure, high-quality software supporting more than 6,500 users across the DoD enterprise, including coordinators, victim advocates, and legal, investigative, and command personnel. In this position, you will help maintain and enhance a system that manages sensitive case-level data, requiring strict adherence to DoD cybersecurity standards and security controls. Working within an Agile development environment, you will participate in regular sprint cycles delivering bug fixes, urgent priority updates, and minor system enhancements while ensuring the platform maintains system availability of 99.5% or higher. The ideal candidate will bring strong experience in CI/CD pipeline automation, secure development practices, and DevSecOps methodologies, along with a solid understanding of the DoD Risk Management Framework (RMF). Your contributions will help ensure the system remains secure, resilient, and capable of supporting evolving mission requirements.

Requirements

DoW Clearance not Required. Ability to obtain and maintain a Tier 3 (T3) background investigation for Noncritical-Sensitive position; Tier 5 (T5) required for privileged access role
Prior experience supporting DMDC or DHRA systems
Experience designing and managing CI/CD pipelines and DevSecOps automation frameworks
Experience working within AWS GovCloud or other DoD-authorized cloud environments
Strong technical experience with Oracle databases, SQL, Apache, and Tomcat environments
Experience with DevSecOps and security tools such as Jenkins, Fortify, Sonatype, and JIRA
Knowledge of DoD Risk Management Framework (RMF) processes and eMASS
Experience implementing NIST SP 800-53 security controls and DISA STIG requirements
Familiarity with Agile/Scrum development methodologies
Strong understanding of secure coding practices and OWASP security standards
U.S. Citizenship
CompTIASecurity+ CE (DoW 8140/8570 compliant)

Nice To Haves

Experience with MicroStrategy reporting platforms
Bachelor’s degree in Engineering, Computer Science, Information Technology, Systems Engineering, or a related technical discipline
DoW 8140 cybersecurity workforce certifications

Responsibilities

Design, implement, and maintain DevSecOps CI/CD pipelines that support secure, automated software delivery
Automate functional testing and integrate automated test cases into the DevSecOps pipeline prior to deployment authorization
Ensure system deliverables are architected to fully leverage Continuous Integration and Continuous Delivery (CI/CD) capabilities
Support quarterly Agile sprint cycles, delivering bug fixes, emergency priority updates, and minor system enhancements
Apply DoD Application Security and Development (ASD) STIG requirements to software architecture, development, and deployment processes
Implement secure coding best practices, including adherence to OWASP security principles
Conduct application security scans using tools such as Fortify and Sonatype, and remediate or mitigate identified vulnerabilities in accordance with Cyber Hardening Policies
Support the migration and deployment of applications to Cloud Service Providers (CSPs) in compliance with the DoD Cloud Computing Security Requirements Guide (SRG)
Operate and maintain development, test, and production environments within IL4 or IL5 cloud environments supporting Controlled Unclassified Information (CUI)
Collaborate with development, operations, and security teams to ensure systems remain secure, compliant, and operationally resilient