Lead DevSecOps Engineer and Application Administrator
About The Position
IronMountain Solutions is seeking a highly skilled, mission-focused Lead DevSecOps Engineer & Application Administrator to serve as the primary technical point of contact for CATENA (Critical Asset Tracking & Enterprise Node Analysis), a mission-critical supply chain risk management dashboard. The role holds end-to-end technical ownership of the CATENA platform, including implementing capabilities, maintaining codebase health, and coordinating deployment operations in the Artificial Intelligence Integration Center (AI2C) hosting environment. The position champions the application's cybersecurity posture through vulnerability remediation, Army-approved identity and access workflows, continuous security scanning, and data protection and disaster recovery verification. The role is based in Huntsville, Alabama, is full-time at 40 hours per week and eight hours per day, and does not authorize remote work. Relocation is negotiable. The position supports CATENA dashboard development and stewardship, AI2C hosting coordination, cybersecurity and compliance, identity and access management, and data integrity, backup, and disaster recovery. Performance is assessed through system availability, patch timeliness, audit readiness, and stakeholder alignment.
Requirements
- Bachelor’s degree in Computer Science, Software Engineering, Information Systems, Cybersecurity, or a related technical discipline, or equivalent practical experience.
- 5+ years of combined experience in software development, application administration, and DevSecOps within enterprise or defense environments.
- Hands-on experience integrating applications with Keycloak, OAuth 2.0, OpenID Connect (OIDC), or SAML 2.0.
- Experience implementing DoD/Army-compliant PKI, CAC/PIV-based MFA, and SSO architectures.
- Familiarity with DoD RMF, NIST SP 800-53, DISA STIGs, and vulnerability scanning and management tools such as SonarQube, Fortify, Anchore, Prisma Cloud, or ACAS/Tenable.
- Direct experience authoring and managing POA&Ms.
- Experience interfacing directly with an ISSM or ISSO.
- Proficiency with container technologies such as Docker and Podman, and orchestration technologies such as Kubernetes and Red Hat OpenShift.
- Working knowledge of modern GitOps and CI/CD pipeline automation, such as GitLab CI, GitHub Actions, or Jenkins.
- Experience managing database backends such as PostgreSQL, Elasticsearch, or MongoDB, along with automated backup scripts, snapshots, and recovery verification routines.
Nice To Haves
- Prior experience collaborating with or deploying solutions onto AI2C or Army enterprise cloud environments such as cARMY.
- Active DoD 8570/8140 IAT Level II or III certification, such as Security+ CE, CySA+, CASP+, or CISSP.
- Familiarity with supply chain risk management (SCRM), bill of materials (SBOM) analysis, or logistics analytics.
- Active Secret or higher security clearance.
Responsibilities
- Serve as the principal technical authority and point of contact for the CATENA dashboard.
- Design, build, and deploy dashboard enhancements, including new functional modules and refinements to existing features based on stakeholder feedback.
- Maintain clean, documented, version-controlled application codebases across environments using modern CI/CD pipelines.
- Ensure application performance, responsiveness, high availability, and seamless data visualization for supply chain risk intelligence.
- Serve as the primary technical liaison to AI2C platform and infrastructure teams.
- Coordinate CATENA deployment, scaling, containerization, and configuration within AI2C enterprise hosting infrastructure.
- Align development sprints with AI2C platform maintenance windows, runtime prerequisites, and infrastructure governance policies.
- Conduct continuous static and dynamic security assessments, including SAST, DAST, and container scanning, across CATENA code and infrastructure.
- Triage, prioritize, and remediate discovered security vulnerabilities, and apply required security patches and dependency updates within mandated timeframes.
- Immediately report security incidents, anomalous system behavior, and emerging threats to the ISSM and AI2C Platform Team.
- Author and maintain POA&M documentation for findings or vulnerabilities not resolved within standard remediation windows.
- Support ongoing RMF and ATO activities for the dashboard.
- Configure hosted frontend applications and backend components to enforce Army-approved MFA via SSO for interactive user and administrative sessions.
- Integrate identity and authentication workflows with the platform's centralized Keycloak service or an authorized, platform-approved alternative IdP.
- Implement granular RBAC in accordance with the principle of least privilege.
- Architect, implement, and maintain backup and restore procedures for CATENA application data, configurations, and persistent storage.
- Conduct monthly recovery drills and verification tests to validate restore viability and minimize potential RTO and RPO.
- Maintain documentation and runbooks for business continuity, disaster recovery, and failover scenarios.
- Maintain high operational uptime within the AI2C runtime environment.
- Meet established vulnerability mitigation timelines or submit a POA&M immediately when timelines cannot be met.
- Maintain traceability and avoid unapproved exceptions in Keycloak SSO/MFA configurations and monthly backup verification logs.
- Communicate proactively and responsively with the ISSM, AI2C engineering teams, and executive stakeholders.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
