DevSecOps Engineer

DecisionPoint | Cortek•,

6d•Remote

About The Position

DecisionPoint Corporation is seeking a DevSecOps Engineer who enjoys building reliable systems and improving developer workflows. In this role, you’ll help maintain and evolve our GitLab-based CI/CD pipelines, Kubernetes environments, and application security integrations — all with a focus on clarity, simplicity, and continuous improvement. This position is ideal for someone with solid technical foundations who wants to grow into a senior systems strategist: someone who not only runs tools, but improves the way they work across teams. This position is remote.

Requirements

Ability to obtain Secret Clearance.
2–5 years of experience in DevOps, Systems Engineering, Software Engineering, or related roles.
Must hold an active an IAT Level II certification; CompTIA Security+ CE highly preferred.
High School diploma with technical experience; College degree preferred.
Proficient with: GitLab CI/CD
Proficient with: Linux and shell fundamentals
Proficient with: Scripting (bash or equivalent)
Familiar with: Kubernetes and Helm
Familiar with: Containerized deployments (Docker)
Working knowledge of: Fortify, SonarQube, or similar CI-integrated security tools
Working knowledge of: CI-driven testing, scanning, and quality gates
Some exposure to: Java build tools (Maven/Gradle)
Some exposure to: Node/NPM workflows
Some exposure to: Modern frontend build systems (React, Svelte, Vite)
Strong communicator and documenter — clear, concise, and proactive.
Mindset: Builder, not breaker: Improves systems quietly and reliably.
Mindset: Learner: Constantly improving and expanding their skills.
Mindset: Simplicity advocate: Avoids unnecessary complexity or tool sprawl.
Mindset: Team-aware: Designs processes that help developers and customers succeed.
Mindset: Reliable communicator: Documents, shares progress, and keeps collaborators informed.

Responsibilities

Support the design, maintenance, and improvement of GitLab CI/CD pipelines.
Optimize automation workflows to improve build reliability and speed.
Ensure consistent, reusable patterns across services and teams.
Contribute to Kubernetes deployments using Helm for package management.
Help maintain reliable, scalable environments across dev, test, and production.
Troubleshoot containerized workloads and cluster-level issues.
Run and interpret Fortify, SonarQube, and related quality/security scans.
Work with developers to triage findings and implement remediation steps.
Embed secure practices into the CI pipeline without slowing teams down.
Partner with Java, Node, Svelte, and React teams to streamline build and deployment processes.
Suggest incremental improvements based on data, observation, and developer feedback.
Communicate clearly about changes, risks, and recommendations.
Produce clear runbooks, setup guides, system diagrams, and technical documentation.
Help simplify onboarding for developers and support staff.
Advocate for well-documented processes that reduce tribal knowledge.
Participate in DevSecOps initiatives that strengthen both security posture and developer experience.
Evaluate new tools and practices thoughtfully — choosing simplicity over complexity.
Expand knowledge in cloud-native systems, automation, and secure pipelines.