DevSecOps Engineer

Northstrat•Sterling, VA

About The Position

GRVTY (Northstrat) is seeking a Senior DevSecOps Engineer IV to support and upgrade the RMT global architecture and support the backbone of a mission-critical, cloud-native ecosystem — a hardware RF stack deployed with scalable software designed to provide USSF with tactical SEW options. Key Responsibilities: Orchestrate and execute over the air (OTA) software deployments to globally fielded systems in a potentially degraded, disconnected, intermittent, and limited (DDIL) connectivity environment. This engineer will be responsible for automating the deployment and security of software, reducing the need for expensive FSR travel while increasing the operational availability of the fleet. Once the software is live, the DevSecOps engineer will monitor its health remotely to preempt failures that could impact mission. Architect Resilience: Maintain scalable Kubernetes infrastructure on AWS IL-6 with high availability and fault tolerance. Orchestrate Delivery: Build and refine CI/CD pipelines using GitLab CI/CD for seamless code-to-cloud transitions including across security domains. Secure the Stack: Integrate automated security scanning (Trivy, SonarQube) and enforce compliance with government security standards throughout the development lifecycle. Optimize Performance: Identify bottlenecks and engineer solutions across cloud and container environments, from cluster tuning to artifact management. Develop features to automate, scale, test, and secure a Kubernetes-based infrastructure. Build and maintain hardened Docker container images, including STIG-compliant base images, optimized Dockerfiles, and integration with Harbor and CI/CD pipelines. Maintain technical documentation, runbooks, and architecture diagrams. Compliance and Audits: Ensure that all DevSecOps practices comply with organizational standards and regulatory requirements. Collaboration: Work closely with development, operations, and security teams to foster a culture of shared responsibility for security.

Requirements

Bachelor's degree in computer science or related field, or equivalent experience.
At least 7+ years (senior level) in DevOps, Infrastructure, or DevSecOps in a cloud environment.
Active or current TS/SCI US government clearance.
Advanced proficiency in Python and/or Bash scripting for automation and operational support.
Deploying software packages to remote operational systems.
Strong Linux/Unix command line proficiency, preferably on RHEL-based systems.
Experience building and maintaining CI/CD pipelines using GitLab CI/CD, Jenkins, ArgoCD, and Helm.
Strong proficiency with Docker — writing Dockerfiles, building hardened images, and integrating builds into pipelines.
Hands-on Kubernetes experience — cluster operations, workload management, RBAC, networking, and troubleshooting.
Familiarity with agile methodologies and ability to operate effectively within a distributed team.
Ability to travel up to 5% of the time.
CompTIA Security+ Certification

Nice To Haves

Experience with AWS services and cloud-native infrastructure patterns.
Experience with RKE2 or other enterprise Kubernetes distributions in air-gapped or restricted environments.
Familiarity with Harbor, Nexus, Trivy, and SonarQube in a pipeline context.
Experience with Ansible for image and configuration management.
CKA/CKAD/CKS and/or AWS DevOps Professional certification

Responsibilities

Orchestrate and execute over the air (OTA) software deployments to globally fielded systems in a potentially degraded, disconnected, intermittent, and limited (DDIL) connectivity environment.
Automate the deployment and security of software, reducing the need for expensive FSR travel while increasing the operational availability of the fleet.
Monitor the health of live software remotely to preempt failures that could impact mission.
Maintain scalable Kubernetes infrastructure on AWS IL-6 with high availability and fault tolerance.
Build and refine CI/CD pipelines using GitLab CI/CD for seamless code-to-cloud transitions including across security domains.
Integrate automated security scanning (Trivy, SonarQube) and enforce compliance with government security standards throughout the development lifecycle.
Identify bottlenecks and engineer solutions across cloud and container environments, from cluster tuning to artifact management.
Develop features to automate, scale, test, and secure a Kubernetes-based infrastructure.
Build and maintain hardened Docker container images, including STIG-compliant base images, optimized Dockerfiles, and integration with Harbor and CI/CD pipelines.
Maintain technical documentation, runbooks, and architecture diagrams.
Ensure that all DevSecOps practices comply with organizational standards and regulatory requirements.
Work closely with development, operations, and security teams to foster a culture of shared responsibility for security.

Benefits

Power of choice benefits designed to best meet the needs of you and your lifestyle.
Benefits programs designed to support and encourage wellness, healthy living, retirement investment, and lifetime learning.
Flex Time: Employees are only required to work an average of 8 hours per weekday over the course of a month.
Individual Benefits Account (IBA): Provides attractive benefits on a flexible basis enabling employees to select a package that best suits their needs (paid time off, medical expenses, prescription drug expenses, cash disbursement, or a combination).
IBA can be used for Medical and Vision Insurance through United Health Care; Dental insurance through Delta Dental.
100% Medical Reimbursement
Time Off with Pay
Profit Sharing Plan
401k
Educational Benefits
Additional Income
IBA benefits accrue each month in the amount equivalent to 50% of the employee’s monthly compensation rate.
Profit Sharing Plan (PSP): Northstrat funds quarterly on the employee’s behalf through the IBA in the amount equivalent to 25% (up to the IRS contribution limit) of the employee’s compensation.
Lifelong Learning: Company provided online learning opportunities, periodic company sponsored training events, and ability to use IBA funds for reimbursement of work-related education expenses.
Diversity and Inclusion: Embrace diversity and encourage inclusion. Support employee led interest groups.
Employee referral incentives.
Equal Opportunity Employer: Committed to fostering an inclusive, diverse workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, disability, veteran status or other legally protected status.