DevSecOps (1472)

Zapata Technology•Chantilly, VA

10d•$195,000 - $215,000

About The Position

The DevSecOps Engineer is part of a skilled IT team, working independently and collaboratively with other engineers to identify and test potential enhancements and resolve technical issues. The role takes prototypes through User Acceptance Testing (UAT) and into an air-gapped customer enclave. The position performs software integration, including systems analysis, requirements gathering, scripting, testing, and documentation. It engages directly with customers during requirements sessions and UAT, tracks feedback as issues, and delivers fixes. The engineer uses source code control to safeguard changes and apply software updates. The role designs, develops, and maintains tools for document ingestion, structural normalization and segmentation, classification-marking extraction, similarity scoring, and search indexing with document-level access control. It also develops content conversion, user and group mapping, and permission-preserving migration tools, validating migrations end to end and at scale. Infrastructure responsibilities include designing and implementing scalable deployments across multiple networks using DevSecOps practices; packaging and deploying applications with Helm and Kubernetes; and delivering container images through a Podman air-gap delivery path. This includes offline dependency closures, hardened base images, SBOMs, image signing, and CVE remediation. The engineer documents infrastructure creation, management, and decommissioning procedures and maintains security protections for tools handling classified data, including fail-closed access control, mTLS and PKI-based identity, tamper-evident audit logging, and test suites. Additional duties may be assigned.

Requirements

Knowledge of containerization and container orchestration, including networking, using Docker, Podman, and Kubernetes.
Experience delivering software into air-gapped or disconnected environments.
Proficiency in TypeScript or JavaScript on Node.js and in Java with Maven; comfort with Shell scripting.
Experience with document parsing and data conversion for DOCX, XLSX, PDF, XML, and JSON, and with regular expressions, including repairing malformed input.
Experience with a search engine such as OpenSearch or Elasticsearch, including index provisioning and role-based or document-level security.
Linux system administration knowledge, including command line, service management, and software configuration within virtual machine constraints.
Excellent verbal and written communication skills.
Professional manner and a strong ethical code.
Exceptional time management and ability to multitask.
Bachelor’s degree and six years of experience performing similar or related work are required. Four years of experience may be substituted for a bachelor’s degree; two years’ experience may be substituted for a degree.
Top Secret SCI clearance required.
Must be able to work 9 a.m.–5 p.m. EST, Monday through Friday, during the customer’s core support hours.

Nice To Haves

Experience developing Atlassian Confluence Data Center plugins (P2/OSGi, Spring, Atlassian SDK), including support for multiple Confluence versions.
Experience administering or extending MediaWiki, including configuration, PHP extensions, and skin theming.
Experience with classification marking standards and handling classified or controlled documents.
Experience with OCR and document layout analysis tools such as Docling or Tesseract, and evaluating them for constrained environments.
Experience with PKI, mTLS, step-ca, Keycloak, or OAuth2 proxies for per-user identity in Kubernetes.
Experience profiling and tuning applications at scale, such as hundreds of thousands of documents or thousands of wiki spaces.
Familiarity with Python and PowerShell.

Responsibilities

Perform software integration tasks, including systems analysis, requirements gathering, scripting, testing, and documentation.
Participate directly in customer requirements sessions and user acceptance testing, converting feedback into tracked issues and delivered fixes.
Use source code control to track and safeguard changes and apply software updates.
Design, develop, and maintain tools for document ingestion, structural normalization and segmentation, classification-marking extraction, similarity scoring, and search indexing with document-level access control.
Develop and maintain tools for content conversion, user and group mapping, and permission-preserving migration.
Validate migrations end to end and at scale.
Design and implement scalable infrastructure deployments across multiple networks using DevSecOps practices.
Package and deploy applications with Helm and Kubernetes, and provide container images for Podman-based air-gap delivery, including offline dependency closures, hardened base images, SBOMs, image signing, and CVE remediation.
Document infrastructure creation, management, and decommissioning procedures.
Uphold the security posture of tools handling classified data, including fail-closed access control, mTLS and PKI-based identity, tamper-evident audit logging, and test suites.
Collaborate across the organization on a variety of company contracts and projects.
Perform additional duties as assigned.