Lead DevSecOps Engineer and Application Administrator

IronMountain Solutions•Huntsville, AL

3d•Onsite

About The Position

IronMountain Solutions is seeking a mission-focused Lead DevSecOps Engineer & Application Administrator to serve as the primary technical point of contact and technical authority for CATENA (Critical Asset Tracking & Enterprise Node Analysis), a mission-critical supply chain risk management dashboard. The role has end-to-end technical ownership of the platform, including implementing capabilities, maintaining the codebase, and coordinating deployment operations in the Artificial Intelligence Integration Center (AI2C) hosting environment. The position champions CATENA’s cybersecurity posture by managing vulnerability remediation, enforcing Army-approved identity and access workflows, coordinating continuous security scanning, and ensuring data protection and disaster recovery verification. It also serves as the primary technical liaison to AI2C platform and infrastructure teams and supports RMF and ATO activities. The position is based in Huntsville, Alabama. Remote work is not authorized. The schedule is full-time, 40 hours per week, eight hours per day; relocation is negotiable.

Requirements

Bachelor’s degree in Computer Science, Software Engineering, Information Systems, Cybersecurity, or a related technical discipline, or equivalent practical experience.
At least 5 years of combined experience in software development, application administration, and DevSecOps within enterprise or defense environments.
Hands-on experience integrating applications with Keycloak, OAuth 2.0, OpenID Connect (OIDC), or SAML 2.0.
Experience implementing DoD/Army-compliant PKI, CAC/PIV-based MFA, and SSO architectures.
Familiarity with DoD RMF, NIST SP 800-53, DISA STIGs, and vulnerability scanning and management tools.
Direct experience authoring and managing POA&Ms.
Experience interfacing directly with an ISSM or ISSO.
Proficiency with container technologies such as Docker or Podman and orchestration technologies such as Kubernetes or Red Hat OpenShift.
Working knowledge of GitOps and CI/CD pipeline automation, using tools such as GitLab CI, GitHub Actions, or Jenkins.
Experience managing database backends such as PostgreSQL, Elasticsearch, or MongoDB, along with automated backup scripts, snapshots, and recovery verification routines.

Nice To Haves

Prior experience collaborating with or deploying solutions onto AI2C or Army enterprise cloud environments such as cARMY.
Active DoD 8570/8140 IAT Level II or III certification, such as Security+ CE, CySA+, CASP+, or CISSP.
Familiarity with supply chain risk management (SCRM), software bill of materials (SBOM) analysis, or logistics analytics.
Active Secret or higher security clearance.

Responsibilities

Serve as the principal technical authority and primary technical point of contact for the CATENA dashboard.
Design, build, and deploy dashboard enhancements, integrate new functional modules, and refine existing features based on stakeholder feedback.
Maintain clean, documented, version-controlled application codebases across environments using modern CI/CD pipelines.
Ensure application performance, responsiveness, high availability, and effective data visualization for supply chain risk intelligence.
Act as the primary technical liaison to AI2C platform and infrastructure teams.
Coordinate CATENA deployment, scaling, containerization, and configuration within the AI2C enterprise hosting infrastructure.
Align development sprints with AI2C maintenance windows, runtime prerequisites, and infrastructure governance policies.
Conduct continuous static and dynamic security assessments, including SAST, DAST, and container scanning, across application code and infrastructure.
Triage, prioritize, and remediate vulnerabilities; apply security patches and dependency updates within required timeframes.
Immediately report security incidents, anomalous system behavior, and emerging threats to the ISSM and AI2C Platform Team.
Author and maintain POA&M documentation for findings or vulnerabilities that cannot be resolved within standard remediation windows.
Support ongoing RMF and ATO activities for the dashboard.
Configure frontend applications and backend components to enforce Army-approved MFA through SSO for interactive user and administrative sessions.
Integrate identity and authentication workflows with the centralized Keycloak service or an authorized, platform-approved alternative IdP.
Implement granular RBAC in accordance with the principle of least privilege.
Architect, implement, and maintain backup and restore procedures for application data, configurations, and persistent storage.
Conduct monthly recovery drills and verification tests to validate restore viability and minimize RTO and RPO.
Maintain documentation and runbooks for business continuity, disaster recovery, and failover scenarios.
Maintain system operational uptime within the AI2C runtime environment, meet vulnerability mitigation timelines or submit POA&Ms, preserve audit traceability for SSO/MFA configurations and backup verification logs, and communicate proactively with stakeholders.