DevSecOps Engineer - JobID-0331

Innovative Defense Technologies•Arlington, VA

1d•Onsite

About The Position

Innovative Defense Technologies (IDT) is hiring a mid-level DevSecOps Engineer for its Internal DevSecOps team. The team supports IDT software teams by maintaining secure software factories and trusted DevSecOps environments, improving developer experience, and encouraging collaboration and shared engineering practices. The role focuses on designing CI/CD systems, reusable Infrastructure as Code modules, automated security and compliance controls, and platform solutions that help teams deliver secure, compliant, high-quality software. This is an on-site position requiring at least three days in the office in Arlington, Virginia; Mount Laurel, New Jersey; or Fall River, Massachusetts. Applicants must be able to obtain and maintain an active U.S. Secret security clearance, be U.S. citizens, and be able to travel up to 10%.

Requirements

5–7 years of professional post-graduation experience in DevSecOps, DevOps, platform or systems engineering, or software engineering, with an emphasis on automation or platform administration.
Bachelor’s degree in Computer Science, Engineering, or a related technical field, or equivalent practical experience.
U.S. citizenship.
Ability to obtain and maintain an active Secret U.S. security clearance.
Ability to travel up to 10%.
Strong working knowledge of secure SDLC methodologies, such as Agile/Scrum, branching strategies, secure code reviews, automated linting, and release packaging.
Practical experience building and optimizing CI/CD pipelines using Jenkins or another CI/CD orchestrator, including shared libraries, declarative pipelines, or automated test hooks.
Practical experience orchestrating containerized workloads using Podman, Docker, or Kubernetes, including network configuration, container storage, and local registry synchronization.
Capability to write and modularize Infrastructure as Code using Ansible, OpenTofu, or another automation technique.
Intermediate Python programming skills and strong Linux/Unix Bash scripting skills.
Strong proficiency with Git, including branch strategies, merge conflict resolution, and Git Hooks or API-driven integrations.
Systems-level troubleshooting skills, including diagnosing root causes of operating system, container, or CI/CD pipeline issues.
Collaborative, enablement-focused approach and strong communication skills, including willingness to mentor junior engineers and help software teams resolve platform issues.

Nice To Haves

Experience designing SBOM auditing workflows or managing open-source license compliance, including GPL/LGPL risks.
Experience architecting or configuring high-performance local AI infrastructure, such as GPU clusters, vLLM orchestration, or vector databases such as Qdrant, behind a VPN or in air-gapped setups.
Experience configuring custom pipeline diagnostics, usage telemetry, or observability stacks such as Prometheus, Grafana, or ELK.
Active Secret or Top Secret security clearance and practical experience applying DISA STIGs or preparing environments for CMMC audits.

Responsibilities

Design, architect, and optimize CI/CD pipelines using Jenkins, including reusable templates and shared components.
Integrate automated security controls into pipelines, including SAST, SCA, container scanning, SBOM generation, and secrets detection.
Configure, scale, and secure the Software Factory platform, including GitLab, JFrog Artifactory, and SonarQube; manage system setups, staging and testing clusters, and automated backups.
Design, modularize, and maintain Infrastructure as Code blueprints using Ansible and OpenTofu to enable repeatable environments and deployments.
Orchestrate and optimize containerized clusters using Podman, secure cluster communications, and manage local registry synchronization.
Own and harden platform deployments in secure, air-gapped environments by packaging and deploying dependencies, resolving environment-specific issues, and supporting repeatable delivery without external connectivity.
Collaborate with SECOPs teams to maintain DevSecOps platform compliance.
Automate compliance enforcement by translating DISA STIGs, NIST 800-171, and RMF controls into pipeline validation scripts and policy-as-code configurations.
Diagnose and remediate system issues such as SELinux policy denials, pipeline token validation problems, and local network or VPN bottlenecks, and define lasting fixes.
Analyze developer telemetry, feedback, and build metrics to reduce pipeline friction and improve developer experience.
Partner with software, security, and systems engineering teams to establish collaborative delivery patterns and guide developers on DevSecOps best practices.