DevSecOps Engineer - JobID-0331

Innovative Defense Technologies•Arlington, VA

2d•$114,000 - $231,000•Onsite

About The Position

Innovative Defense Technologies (IDT) is seeking a mid-level DevSecOps Engineer for its Internal DevSecOps team. The team works to accelerate secure, compliant, high-quality software delivery across IDT by maintaining a secure software factory and trusted DevSecOps environments, improving the developer experience, and fostering collaboration and shared engineering practices. The engineer will design CI/CD systems, architect reusable Infrastructure as Code (IaC) modules, automate security compliance frameworks, and build platform solutions that help software teams deliver confidently and efficiently. This is an on-site position based in Arlington, VA; Mount Laurel, NJ; or Fall River, MA, requiring at least three days in the office. Applicants must be able to obtain and maintain an active Secret U.S. Security Clearance. The role may require travel up to 10%.

Requirements

5–7 years of post-graduation professional experience in DevSecOps, DevOps, Platform/Systems Engineering, or Software Engineering, emphasizing automation or platform administration.
Bachelor’s degree in Computer Science, Engineering, or a related technical field, or equivalent practical experience.
U.S. citizenship.
Ability to obtain and maintain an active Secret U.S. Security Clearance.
Ability to travel up to 10%.
Strong working knowledge of secure SDLC methodologies, such as Agile/Scrum, branching strategies, secure code reviews, automated linting, and release packaging.
Practical experience building and optimizing CI/CD pipelines with Jenkins or another CI/CD orchestrator.
Practical experience orchestrating containerized workloads using Podman, Docker, or Kubernetes, including network configuration, container storage, and local registry synchronization.
Experience writing and modularizing IaC using Ansible, OpenTofu, or another automation technique.
Intermediate Python programming skills, including API clients, custom scripts, or automation frameworks, and strong Linux/Unix Bash scripting skills.
Strong Git version-control skills, including branch strategies, merge-conflict resolution, and Git Hooks or API-driven integrations.
Systems-level troubleshooting skills to diagnose root causes of operating system, container, or CI/CD pipeline issues.
Collaborative, enablement-focused approach, strong communication skills, and willingness to mentor junior engineers and help software teams resolve platform issues.

Nice To Haves

Experience designing SBOM auditing workflows or managing open-source license compliance, including GPL/LGPL risks.
Experience architecting or configuring high-performance local AI infrastructure, such as GPU clusters, vLLM orchestration, or vector databases like Qdrant, in VPN-protected or air-gapped environments.
Experience configuring pipeline diagnostics, usage telemetry, or observability stacks such as Prometheus, Grafana, or ELK.
Active Secret or Top Secret security clearance, with practical experience applying DISA STIGs or preparing environments for CMMC audits.

Responsibilities

Design, architect, and optimize Jenkins CI/CD pipelines, including reusable pipeline templates and custom shared components.
Integrate security controls such as SAST, SCA, container scanning, SBOM generation, and secrets detection into pipelines.
Configure, scale, and secure the Software Factory platform, including GitLab, JFrog Artifactory, and SonarQube; manage system setups, staging and testing clusters, and automated backups.
Design, modularize, and maintain IaC blueprints using Ansible and OpenTofu to support repeatable environment setup and deployments.
Orchestrate and optimize containerized clusters using Podman, secure cluster communications, and manage local registry synchronization.
Deploy and harden DSO platforms in secure, air-gapped environments by packaging and deploying dependencies, remediating environment-specific issues, and supporting repeatable delivery without external connectivity.
Collaborate with SECOPs teams to maintain DSO platform compliance.
Translate DISA STIGs, NIST 800-171, and RMF controls into automated pipeline validation scripts and policy-as-code configurations.
Diagnose and remediate system issues such as SELinux policy denials, pipeline token validation problems, and local network or VPN bottlenecks, and define long-term fixes.
Analyze developer telemetry, feedback, and build metrics to reduce pipeline friction and improve developer experience.
Partner with software, security, and systems engineering teams to establish collaborative delivery practices and guide developers on DSO best practices.