DevSecOps Engineer

Emerald Technical Solutions

  • Maryland
  • 14 days ago

    Highlights

    Security & Compliance Experience automating and supporting Risk Management Framework (RMF) and Authority to Operate (ATO) processes, including generating artifacts for XACTA and/or eMASS, Privacy Impact Assessments, and Test Plan Management/Self-Assessments. You will be responsible for automating our deployment pipelines, hardening containerized workloads, managing secure infrastructure, and accelerating our path to a Continuous Authority to Operate (cATO) across multi-enclave environments.

    Numbers & Facts

    LocationMaryland
    Websitehttps://emeraldsolutions.tech

    Description

    DevSecOps Engineer
    Position Title: DevSecOps Engineer
    Position Type: Full Time Employee
    Location: Aberdeen Proving Ground (APG), MD
    Clearance Requirement: Active Top Secret Clearance
    Salary Range: $140,000 – $160,000    Start Date: Approx. 09/01
    Position Overview
    We are seeking a DevSecOps Engineer to join our team in supporting critical U.S. Army mission applications. In this role, you will bridge the gap between software development, military-grade security compliance, and cloud operations.
    You will be responsible for automating our deployment pipelines, hardening containerized workloads, managing secure infrastructure, and accelerating our path to a Continuous Authority to Operate (cATO) across multi-enclave environments.
    Required Qualifications
    Clearance & Certifications
    • Must possess an active TS security clearance.
    • Must meet DoD 8570.01-M IAT Level II baseline certification requirements (e.g., CompTIA Security+ CE, CCNA Security, or equivalent) prior to start.
    Cloud & Infrastructure
    • Experience provisioning and administering Azure/Azure Government cloud environments (AKS/Containers, Azure DevOps, ACR, Blob Storage).
    • Experience deploying and managing workloads on Red Hat OpenShift using GitOps methodologies (e.g., ArgoCD, GitLab runners) with strict Dev/Stage/Prod separation.
    • Experience deploying, scaling, and automating backups for database platforms, specifically MongoDB (replica sets) and PostgreSQL/pgAdmin within containerized environments.
    DevSecOps & Automation
    • Working knowledge of application containerization, container hardening, Dockerfile creation and management, and automated container building and deployment processes.
    • Hands-on experience building, securing, and maintaining robust CI/CD pipelines utilizing GitLab CI and/or Azure DevOps.
    • Experience integrating automated security gates (SAST/DAST, Software Bill of Materials [SBOM]) and container scanning tools (e.g., Semgrep, Fortify, Grype, SonarQube) directly into deployment pipelines.
    • Scripting proficiency in Python and PowerShell for infrastructure automation, system monitoring, data migration, and backup automation.
    Security & Compliance
    • Experience automating and supporting Risk Management Framework (RMF) and Authority to Operate (ATO) processes, including generating artifacts for XACTA and/or eMASS, Privacy Impact Assessments, and Test Plan Management/Self-Assessments.
    • Strong familiarity with DoD/IC Impact Level environments (IL4/IL5/IL6, IL7), STIG compliance, and associated security constraints.
    • Experience integrating identity and access management (IAM) solutions such as Keycloak (OAuth, OIDC, SSO integration).
    • Experience managing PKI and certificate lifecycles, including requesting, deploying, and rotating non-person entity (NPE) certificates.
    General & Professional Skills
    • Experience working within a complex government/IC customer environment (e.g., Army, NGA), including coordinating technical requirements across multiple stakeholder teams.
    • Strong written communication skills with the ability to generate clear technical documentation, standard operating procedures (SOPs), and status reports.
    Preferred Qualifications
    • Hands-on experience operating within air-gapped, high-side, or JWICS network environments.
    • Experience with Cross-Domain Solutions (CDS) or secure data transfer protocols between enclaves of varying classifications.
    • Experience implementing centralized Secrets Management solutions (e.g., GitLab Secrets, Azure Key Vault).
    • Full-stack application development experience or experience supporting developers with admin dashboards, API gateways, and data visualization/mapping tools (e.g., Leaflet).
    • Experience with database schema design, standardization, and migration patterns across multiple database platforms (Postgres, SQL, Mongo).
    • Strong verbal communication skills with a proven ability to brief complex technical capabilities to non-technical leadership or mixed audiences.
    Benefits
    • Competitive compensation package and benefits.
    • Professional development and certification opportunities.
    • Collaborative and supportive team environment.

    Similar Jobs

    See more jobs