DevSecOps (1472)

Zapata Technology•Chantilly, VA

About The Position

The DevSecOps Engineer works independently and collaboratively with other engineers to identify and test potential enhancements and resolve technical issues, taking prototypes through User Acceptance Testing (UAT) and into an air-gapped customer enclave. The role performs software integration, systems analysis, requirements gathering, scripting, testing, and documentation. The engineer participates directly in customer requirements sessions and UAT, converts customer feedback into tracked issues, and delivers fixes. They use source code control to safeguard changes and apply software updates. The engineer designs, develops, and maintains tools for document ingestion, normalization and segmentation, classification-marking extraction, similarity scoring, and indexing into a search engine with document-level access control. They also develop tools for content conversion, user and group mapping, and permission-preserving migration, then validate migrations end to end and at scale. The role requires devising solutions with minimal prior documentation. Infrastructure responsibilities include designing and implementing scalable deployments across multiple networks using DevSecOps practices; packaging and deploying applications with Helm and Kubernetes; and delivering container images for a Podman air-gap path. This includes offline dependency closures, hardened base images, software bills of materials (SBOMs), image signing, and CVE remediation. The engineer documents infrastructure creation, management, and decommissioning procedures and upholds security for tools handling classified data, including fail-closed access control, mTLS and PKI-based identity, tamper-evident audit logging, and test suites. The position is full-time, with customer core support hours of 9:00 a.m. to 5:00 p.m. EST, Monday through Friday. Travel is less than 5%. A Top Secret SCI clearance is required. Additional duties may be assigned.

Requirements

Knowledge of containerization and container orchestration, including networking, using Docker, Podman, and Kubernetes.
Experience delivering software into air-gapped or disconnected environments.
Proficiency in TypeScript or JavaScript on Node.js and in Java with Maven.
Comfort with Shell scripting.
Experience with document parsing and data conversion for DOCX, XLSX, PDF, XML, and JSON, and with regular expressions, including repairing malformed input.
Experience with a search engine such as OpenSearch or Elasticsearch, including index provisioning and role-based or document-level security.
Linux system administration knowledge, including command line, service management, and software configuration within virtual machine constraints.
Excellent verbal and written communication skills.
Professional manner and a strong ethical code.
Exceptional time management and ability to multitask.
A bachelor’s degree and 6 years of experience performing similar or related work; the posting also states that four years of experience may be substituted for a bachelor’s degree and that two years’ experience may be substituted for a degree.
Top Secret SCI clearance.
Ability to work 9:00 a.m. to 5:00 p.m. EST, Monday through Friday, during customer core support hours.

Nice To Haves

Experience developing Atlassian Confluence Data Center plugins (P2/OSGi, Spring, Atlassian SDK), including support for multiple Confluence versions.
Experience administering or extending MediaWiki, including configuration, PHP extensions, and skin theming.
Experience with classification marking standards and handling classified or controlled documents.
Experience with OCR and document layout analysis tools such as Docling or Tesseract, including evaluating them for constrained environments.
Experience with PKI, mTLS, step-ca, Keycloak, or OAuth2 proxies for per-user identity in Kubernetes.
Experience profiling and tuning applications at scale, including hundreds of thousands of documents or thousands of wiki spaces.
Familiarity with Python and PowerShell.

Responsibilities

Perform software integration tasks, including systems analysis, requirements gathering, scripting, testing, and documentation.
Participate directly in customer requirements sessions and user acceptance testing; convert feedback into tracked issues and delivered fixes.
Use source code control to track and safeguard changes and apply software updates.
Design, develop, and maintain tools for document ingestion, normalization and segmentation, classification-marking extraction, similarity scoring, and search indexing with document-level access control.
Devise solutions where prior documentation is limited.
Develop and maintain tools for content conversion, user and group mapping, and permission-preserving migration.
Validate migrations end to end and at scale.
Design and implement scalable infrastructure deployments across multiple networks using DevSecOps practices.
Package and deploy applications with Helm and Kubernetes, and deliver container images for Podman-based air-gapped deployment, including offline dependency closures, hardened base images, SBOMs, image signing, and CVE remediation.
Document infrastructure creation, management, and decommissioning procedures.
Maintain security for tools handling classified data, including fail-closed access control, mTLS and PKI-based identity, tamper-evident audit logging, and test suites.
Collaborate across the organization on company contracts and projects.
Perform additional duties as assigned.