DevSecOps Engineer (Top Secret with agreement to obtain CI Poly)

North Point Technology•Springfield, VA

16h

About The Position

North Point Technology is looking to hire a DevSecOps Engineer to manage application deployments and maintain the CI/CD pipelines and cloud infrastructure that keep mission systems running. The qualified candidate must have an active TS/SCI security clearance and will operate in a DoD/IC (NGA) environment, owning deployments across multiple environments, shepherding changes through formal approval gates, and maintaining a strong security and compliance posture. The ideal candidate pairs hands-on AWS and containerization skills with a disciplined approach to change management and release reliability.

Requirements

Active TS clearance required; must be eligible for CI Polygraph. Applicants without an active TS clearance will not be considered.
Active Top Secret/SCI security clearance
DevSecOps or Site Reliability Engineering experience in a cloud environment (AWS preferred)
Hands-on CI/CD pipeline management (GitLab CI preferred)
Containerized deployments using ECS, Docker, and container orchestration
AWS infrastructure services such as Lambda, RDS, VPC, CloudWatch, SSM Parameter Store, and S3
Change management and security accreditation processes in a DoD/IC environment (CHG submissions, RMF, XACTA)
Infrastructure as Code (IaC) principles and rollback procedures

Nice To Haves

EKS (Kubernetes) migrations or hybrid ECS/EKS environments
NGA enterprise requirements for National Security Systems (NSS), including log retention and compliance standards
MCP server deployment
Node.js and TypeScript ecosystem (Lambda runtimes, dependency management, and layer packaging)
AWS certifications such as Solutions Architect, DevOps Engineer, or Security Specialty

Responsibilities

Managing application deployments across multiple environments, including deploying code updates, troubleshooting deployment failures, and executing environment-specific configurations.
Owning the Change Management (CHG) process for production deployments - preparing and submitting change requests, shepherding them through ISO, TESR, and Outage Board approval gates, and coordinating deployment windows with stakeholders.
Maintaining the security and compliance posture by managing XACTA documentation, ensuring TESR approval requirements are met, and enforcing enterprise log retention policies aligned with National Security Systems (NSS) requirements.
Operating and maintaining the CI/CD pipelines and supporting infrastructure, including GitLab CI configurations.