Software Engineer - Cloud & DevSecOps

Strategic Data Systems•Dahlgren, VA

8d•Onsite

About The Position

Strategic Data Systems is seeking a Software Engineer – Cloud & DevSecOps to support the Naval Surface Warfare Center Dahlgren Division (NSWCDD) Research, Development, Test & Evaluation (RDT&E) environment in Dahlgren, Virginia. The role contributes to the design, development, integration, deployment, and modernization of mission-critical applications and supporting infrastructure in a Department of Defense technical environment. The engineer supports the full software development lifecycle and helps shape technical solutions, improve development practices, strengthen system reliability, and enhance operational efficiency. The position combines software engineering, cloud engineering, DevOps automation, containerization, and secure software development. It supports web applications and infrastructure in Microsoft Azure and/or AWS, develops and maintains GitLab CI/CD pipelines, and works with Docker, Kubernetes, Helm, and HashiCorp Vault. The engineer collaborates with government stakeholders, engineering personnel, system administrators, and cybersecurity teams; provides technical recommendations; mentors colleagues; and maintains technical and operational documentation.

Requirements

Five to eight years of relevant professional experience in software engineering, full-stack development, cloud engineering, DevOps, or a closely related discipline.
IAT Level 2 certification, such as CompTIA Security+.
Top Secret security clearance.
Experience developing, maintaining, and troubleshooting enterprise-level web applications.
Strong working knowledge of JavaScript and modern software development principles.
Hands-on experience supporting applications or infrastructure in Microsoft Azure and/or AWS.
Experience with GitLab, including version control, CI/CD pipeline development, configuration, optimization, and automation.
Experience implementing automated software testing and validation processes.
Working knowledge of containerized application deployment, including Docker, Kubernetes, and Helm.
Experience with HashiCorp Vault or comparable secure secrets management technologies.
Strong understanding of software architecture, application integration, and the software development lifecycle.
Ability to diagnose and resolve complex issues across software, infrastructure, and cloud environments.
Understanding of secure coding principles, cybersecurity compliance requirements, and vulnerability remediation.
Experience participating in technical design discussions and recommending improvements to application performance, reliability, and maintainability.
Ability to work independently, manage competing technical priorities, and deliver solutions with limited supervision.
Experience working directly with customers or technical stakeholders to assess requirements and resolve operational challenges.
Strong analytical, organizational, written communication, and interpersonal skills.

Nice To Haves

Bachelor's degree in Computer Science, Software Engineering, Information Technology, Computer Engineering, or a related technical discipline.
Experience developing applications using Vue.js, Python Flask, Java Spring, TypeScript, and HTML.
Advanced experience configuring, administering, and troubleshooting Kubernetes environments.
Experience developing and maintaining Helm charts for enterprise containerized applications.
Experience designing or improving cloud-based application architectures in Azure or AWS.
Experience supporting hybrid cloud environments, including on-premises infrastructure, virtualization, cloud identity management, and storage solutions.
Familiarity with cloud monitoring, logging, observability, and performance optimization tools.
Strong understanding of networking fundamentals, including TCP/IP, routing, VPNs, VLANs, peering, and load balancing.
Experience implementing Infrastructure as Code, configuration management, or infrastructure automation solutions.
Experience integrating automated security testing and compliance validation into CI/CD pipelines.
Familiarity with DoD cybersecurity requirements, secure development environments, and Risk Management Framework processes.
Experience supporting software development and infrastructure operations within DoD, federal government, or other highly regulated environments.
Demonstrated experience improving engineering processes, modernizing applications, or implementing technical automation initiatives.
Relevant industry certifications in cloud engineering, software development, Kubernetes, DevOps, or cybersecurity.

Responsibilities

Design, develop, maintain, and enhance secure, scalable, high-performance web applications for mission-critical RDT&E operations.
Contribute to software architecture and technical design decisions, emphasizing maintainability, reliability, performance, and sustainability.
Develop and maintain application functionality using JavaScript and related full-stack technologies.
Integrate applications with enterprise data sources, analytics platforms, reporting systems, and supporting infrastructure.
Develop and execute automated unit, functional, integration, performance, and acceptance testing.
Conduct code reviews, identify optimization opportunities, and promote software engineering best practices.
Troubleshoot, debug, and resolve complex application issues, including root-cause analysis.
Identify opportunities to modernize legacy applications, streamline development, and improve software quality.
Support development, deployment, configuration, and maintenance of applications in Microsoft Azure and AWS environments.
Troubleshoot technical issues spanning application code, cloud infrastructure, networking, and supporting services.
Evaluate cloud application performance, availability, security, and operational efficiency.
Collaborate with infrastructure and cybersecurity teams to configure, secure, monitor, and maintain applications.
Support IaaS, virtualization, and hybrid cloud solutions; recommend improvements to cloud architecture, deployment strategies, and operations.
Assist with application and infrastructure lifecycle planning, deployment coordination, upgrades, and sustainment.
Design, develop, maintain, and optimize GitLab CI/CD pipelines and implement automation to improve development and deployment reliability.
Support GitLab version control, repository management, pipeline configuration, and automated testing integration.
Develop, configure, and maintain Helm charts and support application deployment and troubleshooting in Docker and Kubernetes environments.
Resolve deployment failures, configuration inconsistencies, and pipeline performance issues.
Implement secure configuration and secrets management using HashiCorp Vault.
Collaborate with development, operations, and cybersecurity personnel to strengthen DevSecOps practices and reduce manual processes through scripting and automation.
Incorporate security throughout application design, development, testing, and deployment; apply secure coding practices consistent with applicable DoD requirements.
Support vulnerability identification and remediation, code validation, security testing, compliance documentation, audit readiness, and adherence to security policies.
Recommend ways to improve security automation and the security posture of supported applications.
Serve as a technical resource for software engineering, cloud deployment, and DevOps activities.
Work with government stakeholders and technical teams to understand requirements and develop effective solutions.
Provide recommendations on application architecture, deployment strategies, technical risks, and engineering improvements.
Independently investigate complex technical challenges and develop practical, sustainable resolutions.
Participate in technical planning, design reviews, and system modernization and operational improvement discussions.
Mentor team members and share technical knowledge to promote consistent engineering practices and professional development.
Develop and maintain technical documentation, configuration procedures, troubleshooting guides, and standard operating procedures.
Communicate technical findings, recommendations, and potential operational impacts to technical and nontechnical stakeholders.