Sr. DevSecOps Engineer
About The Position
M9 Solutions is seeking a Sr. DevSecOps Engineer to work onsite in support of a government contract for a client located in Reston, VA. An active TS/SCI clearance with CI Polygraph is required. This role involves collaborating with the client and internal teams to design and implement technical solutions across multiple classification environments, working independently or collaboratively to address complex requirements. The engineer will develop CI/CD pipelines from scratch in GitLab and Jenkins, with integrated security scanning and STIG compliance validation, and provide expert guidance on pipeline troubleshooting and DevSecOps best practices. Additionally, the role includes creating and maintaining Infrastructure as Code (IaC) templates, primarily using CloudFormation, to architect highly available, resilient, and secure DevSecOps tool infrastructure across AWS environments (GovCloud, C2S, TC2S) while ensuring STIG compliance. The engineer will also lead advanced troubleshooting by analyzing system and application logs using Linux command-line tools, conducting root cause analysis, and developing mitigation strategies to address service degradation. Furthermore, the position requires providing expert guidance to development teams on secure coding practices, STIG compliance, and vulnerability remediation in support of ATO efforts, while mentoring junior engineers through code reviews, IaC best practices, and technical documentation.
Requirements
- Active TS/SCI security clearance with CI Poly.
- 5+ years as a DevSecOps Engineer, DevOps Engineer, or similar.
- Certification to satisfy DoD 8140/8570 (e.g., Security+, or equivalent).
- Strong hands-on Linux experience.
- Experience with designing, deploying, and managing production-grade Kubernetes (K8s) or OpenShift clusters via automation with Ansible and Terraform and/or CloudFormation in on-prem and cloud environments.
- Experience with CI/CD pipelines (e.g., GitLab or equivalent) and containerization.
Nice To Haves
- Experience with Helm chart development and STIGs (preferred).
Responsibilities
- Collaborate with the client and internal teams to design and implement technical solutions across multiple classification environments, working independently or collaboratively to address complex requirements.
- Develop CI/CD pipelines from scratch in GitLab and Jenkins, with integrated security scanning and STIG compliance validation, and provide expert guidance on pipeline troubleshooting and DevSecOps best practices.
- Create and maintain Infrastructure as Code (IaC) templates, primarily using CloudFormation, to architect highly available, resilient, and secure DevSecOps tool infrastructure across AWS environments (GovCloud, C2S, TC2S) while ensuring STIG compliance.
- Lead advanced troubleshooting by analyzing system and application logs using Linux command-line tools, conducting root cause analysis, and developing mitigation strategies to address service degradation.
- Provide expert guidance to development teams on secure coding practices, STIG compliance, and vulnerability remediation in support of ATO efforts, while mentoring junior engineers through code reviews, IaC best practices, and technical documentation.
Benefits
- Competitive compensation package
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
