Mid-Level DevSecOps Engineer (Maru Program)

About the role

The Geospatial Analyst Solutions Directorate, part of the National Solutions Business Area, is seeking a Mid-Level DevSecOps Engineer on the Maru Program. The engineer integrates security into every stage of the software development lifecycle so that mission-critical systems are secure, scalable and rapidly deployable, while supporting the delivery of timely, accurate geospatial intelligence. The role works with software engineers, security teams and system administrators.

Key responsibilities

• Design, implement and maintain secure CI/CD pipelines for microservices and container-based deployments.
• Support containerized environments with Docker and orchestration platforms such as Kubernetes or OpenShift.
• Manage and monitor infrastructure with Terraform or CloudFormation.
• Support secure provisioning, configuration and monitoring of cloud environments such as AWS and Azure.
• Integrate security tools and best practices into development workflows, including static and dynamic code analysis.
• Help harden environments and secure cloud-native architectures.
• Diagnose and resolve build, deployment and performance issues.
• Run vulnerability assessments and assist with compliance activities aligned with RMF, STIGs or related frameworks.
• Document configurations and improve DevSecOps processes and tooling.

Required profile

• US citizenship is required per contract.
• Bachelor's degree in Computer Science, Engineering or a related field with 4-8 years of relevant experience, or a Master's degree with 2-6 years.
• Active Top Secret/SCI clearance with the ability to pass a polygraph examination.

Required skills

• CI/CD tools such as Jenkins, GitLab CI, GitHub Actions or similar.
• Scripting in Python, Bash or PowerShell.
• Infrastructure as Code with Terraform, CloudFormation or similar.
• AWS, Azure or similar cloud environments, including AWS CDK and AWS ECS.
• Docker and Kubernetes, OpenShift or similar orchestration platforms.
• Knowledge of secure coding practices, vulnerability management and code scanning tools.
• Preferred: Zero Trust knowledge and certifications such as AWS Certified DevOps Engineer, CKA, Security+ or GIAC.