DevSecOps Engineer

Spear AI • Washington, DC

13d

About The Position

We are seeking a DevSecOps Engineer to design, implement, and manage secure DevSecOps pipelines and cloud infrastructure for an IC customer operating on MSIC Cloud infrastructure..
Spear AI is a growing defense contracting company dedicated to delivering cutting-edge solutions that support our nation’s security. As we expand, we’re building a culture where innovation meets mission-critical work. We operate with a flat organizational structure that empowers every team member to make an impact, collaborate directly with leadership, and contribute to projects that matter. Whether you’re joining our Hardware, Software, or Services division, you’ll work alongside talented professionals who are committed to excellence and advancing the capabilities that keep our nation safe and secure.
Spear AI builds sonobuoy sensors that are deployed into the water and collect edge data. We also work with the U.S. Navy to collect and process their SONAR data. You’ll have an opportunity to work on real-world projects that directly impact warfighter capabilities and mission success.
What you’ll do
We’re a small team wearing many hats, and you’d have a wide variety of responsibilities that include:

Requirements

• 7–10 years of experience in DevSecOps, cloud engineering, or related discipline, with significant experience in classified or government cloud environments
• Active TS/SCI required; must be able to obtain a Polygraph.
• Hands-on experience with both AWS GovCloud (AWS IC) and Azure Government cloud platforms
• Proficiency with CI/CD tools (GitLab CI, Jenkins, GitHub Actions, or equivalent) in classified environments
• Strong experience with container orchestration (Kubernetes, OpenShift) and container security practices
• Expertise in Infrastructure as Code (Terraform, CloudFormation, Ansible, or Bicep)
• Solid understanding of cloud security frameworks, STIGs, and FedRAMP/IL4/IL5/IL6 compliance requirements
• Familiarity with IC and DoW cloud security policies, including CSP authorization processes
• Experience supporting or integrating with NIST RMF and ATO processes in a DevSecOps capacity
• Security certification required: CISSP, Security+, or equivalent DoW 8570/8140 compliant certification

Nice To Haves

• AWS Certified DevOps Engineer, AWS Certified Security Specialty, Microsoft Azure DevOps Engineer Expert, or equivalent
• Prior experience operating on MSIC Cloud infrastructure
• Experience deploying and securing AI/ML workloads in cloud environments
• Military Intelligence or IC experience

Responsibilities

• Design, build, and maintain secure CI/CD pipelines for AI/ML applications operating on MSIC Cloud (AWS GovCloud and Azure Government)
• Integrate automated security testing, static/dynamic analysis, and compliance checks (SAST, DAST, SCA) throughout the software delivery lifecycle
• Implement and manage Infrastructure as Code (IaC) using tools such as Terraform, CloudFormation, or Bicep for classified cloud environments
• Ensure cloud infrastructure and containerized workloads (Kubernetes, Docker) comply with applicable STIGs, CIS Benchmarks, and IC security requirements
• Collaborate with ISSOs and ISSMs to support ATO processes, continuous monitoring, and security control implementation for cloud-hosted systems
• Develop and maintain automated compliance monitoring, audit logging, and alerting capabilities across AWS and Azure environments
• Implement container security, secrets management, and identity/access management (IAM) best practices for classified cloud workloads
• Support migration and deployment of AI/ML workloads to classified cloud environments, optimizing for performance, scalability, and security
• Maintain DevSecOps documentation, runbooks, and architectural diagrams for classified cloud platforms
• Evaluate and integrate emerging cloud security tools and DevSecOps practices relevant to IC mission environments

Benefits

• Unlimited PTO
• Dedicated Sick Time
• Comprehensive Health & Benefits – Medical, dental, and vision coverage to keep you and your family protected.
• 11 Paid Holidays
• Professional Development
• Collaborative Environment
• Mission-Driven Work
• Growth Opportunities
• 401(k) with company match.
• Onsite / Remote / Flexible work arrangements or hybrid options (position dependent).
• Relocation assistance (position dependent).
• Referral bonuses.
• Performance bonuses.
• Life insurance and disability coverage.
• Technology home office setup stipend.
• Professional certification reimbursement (position dependent).

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed