DevSecOps (1471)

Zapata Technology•Sterling, VA

3d•$195,000 - $215,000

About The Position

The DevSecOps Engineer is part of a skilled IT team and works independently and collaboratively with other engineers to identify and test enhancements and resolve technical issues. The role takes prototypes through User Acceptance Testing (UAT) and into an air-gapped customer enclave. The engineer performs software integration, including systems analysis, requirements gathering, scripting, testing, and documentation. They engage with customers during requirements sessions and UAT, translate feedback into tracked issues and fixes, and use source code control to safeguard changes and apply updates. They design and maintain tools for document ingestion, normalization, segmentation, classification-marking extraction, similarity scoring, and secure search indexing, often with minimal prior documentation. They also develop tools for content conversion and permission-preserving migration, and validate migrations end to end and at scale. The position includes infrastructure management and scalable deployments across multiple networks using DevSecOps practices. Applications are packaged and deployed with Helm and Kubernetes, and delivered as container images for Podman-based air-gapped environments, including offline dependency closures, hardened base images, SBOMs, image signing, and CVE remediation. The engineer documents infrastructure procedures and maintains security controls for classified-data tools, including fail-closed access control, mTLS and PKI-based identity, tamper-evident audit logging, and test suites. Additional duties may be assigned. This is a full-time role with customer core support hours of 9:00 a.m. to 5:00 p.m. EST, Monday through Friday. Travel is less than 5%. A Top Secret SCI clearance is required.

Requirements

Knowledge of containerization and container orchestration, including networking, using Docker, Podman, and Kubernetes.
Experience delivering software into air-gapped or disconnected environments.
Proficiency in TypeScript or JavaScript on Node.js and in Java with Maven; comfort with Shell scripting.
Experience parsing and converting DOCX, XLSX, PDF, XML, and JSON documents, using regular expressions, and repairing malformed input.
Experience with a search engine such as OpenSearch or Elasticsearch, including index provisioning and role-based or document-level security.
Linux system administration knowledge, including command-line use, service management, and software configuration within virtual machine constraints.
Excellent verbal and written communication skills.
Professional manner and a strong ethical code.
Exceptional time management and ability to multitask.
Ability to collaborate across the organization on varied company contracts and projects.
A bachelor’s degree and 6 years of experience performing similar or related work are required. The posting also states that four years of experience may be substituted for a bachelor’s degree and that two years’ experience may be substituted for a degree.
Top Secret SCI clearance is required.

Nice To Haves

Experience developing Atlassian Confluence Data Center plugins (P2/OSGi, Spring, Atlassian SDK), including support for multiple Confluence versions.
Experience administering or extending MediaWiki, including configuration, PHP extensions, and skin theming.
Experience with classification marking standards and handling classified or controlled documents.
Experience with OCR and document layout analysis tools such as Docling or Tesseract, and evaluating them for constrained environments.
Experience with PKI, mTLS, step-ca, Keycloak, or OAuth2 proxies for per-user identity in Kubernetes.
Experience profiling and tuning applications at scale, including hundreds of thousands of documents and thousands of wiki spaces.
Familiarity with Python and PowerShell.

Responsibilities

Perform software integration tasks, including systems analysis, requirements gathering, scripting, testing, and documentation.
Participate directly in customer requirements sessions and user acceptance testing, translate feedback into tracked issues, and deliver fixes.
Use source code control to track and safeguard changes and apply software updates.
Design, develop, and maintain tools for document ingestion, structural normalization and segmentation, classification-marking extraction, similarity scoring, and search indexing with document-level access control.
Develop and maintain tools for content conversion, user and group mapping, and permission-preserving migration; validate migrations end to end and at scale.
Design and implement scalable infrastructure deployments across multiple networks using DevSecOps practices.
Package and deploy applications with Helm and Kubernetes, and deliver container images for Podman-based air-gapped environments.
Prepare offline dependency closures, hardened base images, SBOMs, image signing, and CVE remediation for air-gapped delivery.
Document infrastructure creation, management, and decommissioning procedures.
Maintain the security posture of tools handling classified data, including fail-closed access control, mTLS and PKI-based identity, tamper-evident audit logging, and test suites.
Collaborate across the organization on a variety of company contracts and projects.
Perform additional duties as assigned.