DevSecOps Engineer

Amentum•Colorado Springs, CO

8d•$120,000 - $140,000•Onsite

About The Position

The DevSecOps Engineer supports North American Aerospace Defense Command (NORAD) on the Integrated Tactical Warning/Attack Assessment (ITW/AA) and Space Support Contract II (NISSC II). The DevSecOps Engineer is responsible for the end-to-end implementation and sustainment of the NISSC II software pipeline, independently selecting and adapting advanced techniques to optimize the toolchain. By overseeing the installation, integration, and automation of CI/CD capabilities, they ensure the efficient delivery of secure, high-quality code to the warfighter through a 'Shift Left' security approach. This role combines technical execution—such as performing trades and contributing to Agile ceremonies—with high-level engineering oversight, requiring the analysis of complex features to devise innovative solutions that remain fully integrated with project objectives and documentation standards.

Requirements

Significant relevant experience in supporting sustainment of DoD mission systems/subsystems, such as Web Based and non-Web Based Missile Warning Systems.
Demonstrated experience leading a team in the Mission system aspects of designing and implementing mission system enhancements for a DoD Customer.
Experience sustaining and modernizing mission systems in a DoD Airgap.
Understanding of System Development LifeCycle (SDLC) process in DoD.
Significant knowledge on how to troubleshoot and resolve technical issues in DoD Air Gapped test and production environments.
Hands on experience with DoD Cyber security requirements including STIG, Scan, and static code remediation.
Working in scaled Agile environment frameworks such as SAFe.
Comprehensive background in OS administration RHEL and Windows / Server products.
Understanding of coding and scripting with common languages; Knowledge of relevant major coding languages (e.g.PowerShell, JS).
Strong verbal and written communication skills.
5 years of relevant/related experience

Nice To Haves

Strong knowledge of DoD Cybersecurity requirements including STIG, Scan, and static code remediation within a containerized environment.
Experience leading an organization in the design and implementation of a new or modified DevSecOps pipeline.
Experience implementing DevSecOps pipelines in a VMware Tanzu environment.
Experience with a range of automation and configuration management tools including but not limited to vRealize Automation, vRealize Operations, Ansible, SCCM, Jenkins, puppet, and others.
Experience working with Kubernetes.
Experience implementing Security Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) tools.
Experience working within an Agile development team

Responsibilities

Platform & Containerization: Lead the containerization of USAF Mission systems and COTS/GOTS applications into the VMware Tanzu ecosystem, ensuring full interoperability between virtual machines, SDDCs, and mission-critical assets.
Pipeline Architecture & Automation: Drive the end-to-end lifecycle of the DevSecOps pipeline, from initial requirement design and tool trade studies to the automated integration of CI/CD workflows and "Shift Left" security controls.
System Sustainment & Optimization: Responsible for the rapid resolution of pipeline issues and the continuous maintenance of infrastructure to ensure high availability for developers and timely quarterly delivery of mission capabilities.
Agile Integration & Collaboration: Foster synergy between development, security, and operations (DevSecOps) by leading Agile ceremonies and synchronizing cross-functional release schedules to enable rapid, high-quality software deployments.
Stakeholder Engagement: Develop and deliver technical designs and requirement presentations to secure customer approval and ensure all implementations align with overarching mission objectives.