Senior DevSecOps / cATO Engineer

Chameleon Integrated Services•Linthicum Heights, MD

10d•Onsite

About The Position

We are a growing information technology company that offers its employees a culture of success, the chance to work on revolutionary federal IT infrastructure, and the opportunity to grow alongside cutting-edge technology that is reshaping the industry. We are seeking forward-thinking candidates that have strong experience in operational support and can help take to the next level in a proactive stance. Chameleon Integrated Services has expertise in operations management, quality systems, data operations and cybersecurity. We secure some of the most sensitive data for the Department of Defense and for other U.S. federal government agencies. We are known for the great care we take with clients and employees, and we believe in promoting from within. Chameleon Integrated Services is actively bidding on a proposal to provide Cyberspace Operations and Development for the Enterprise (CODE) services under the DC3 Technical, Analytical, and Business Operations (TABO) requirement. This position is contingent upon contract award. Chameleon Integrated Services is seeking a Senior DevSecOps / cATO Engineer to support unclassified and classified environments across the CODE footprint. This role requires a hands-on technical expert capable of designing, building, and operating advanced Continuous Integration/Continuous Deployment (CI/CD) pipelines with automated security guardrails. The ideal candidate will bridge the gap between software development, IT operations, and cybersecurity compliance, focusing on shifting security to the left and accelerating the transition from static Authorization to Operate (ATO) models to Continuous ATO (cATO) frameworks.

Requirements

Demonstrated hands-on engineering experience running automated CI/CD pipelines.
Proficient with Infrastructure as Code (IaC) tools (e.g., Terraform) and Configuration as Code (CaC) automation (e.g., Ansible).
Strong experience with containerization and container orchestration technologies.
Solid understanding of the Risk Management Framework (RMF), eMASS integration, and generating engineering artifacts for ATO/cATO.
Experience implementing automated code and dependency vulnerability scanning.
Must hold a compliant DoD 8140/8570 baseline certification before being granted administrative or privileged system access.
U.S. Citizenship required

Nice To Haves

Experience working inside a DoD software factory environment or a classified defense DevSecOps ecosystem.
Active TS/SCI clearance.
TS/SCI clearance eligibility preferred

Responsibilities

Engineer, maintain, and optimize secure CI/CD pipelines as part of regular development sprints.
Implement and manage infrastructure utilizing Infrastructure as Code (IaC) and Configuration as Code (CaC) technologies.
Automate security controls, compliance guardrails, and Security Technical Implementation Guides (STIGs) directly into the deployment pipelines.
Generate technical evidence, system documentation, and continuous monitoring data necessary to support system accreditations and cATO workflows.
Conduct software integration, automated testing, vulnerability scanning (SAST/DAST/dependency scanning), patching, and deployment validation.
Provide advanced technical support for incident response activities by pulling system data, analyzing logs, and implementing pipeline-driven corrective actions.
Research, test, and recommend the integration of Agentic AI and other advanced capabilities into automated workflows to improve speed and efficiency.