devsecops engineer

Occam Solutions

<div><p>Primary Responsibility</p><p></p><p><br>
The <b>DevSecOps Engineer</b> shall serve as the lead technical engineer responsible for designing, implementing, securing, automating, and sustaining the cloud infrastructure supporting the Office of Naval Research (ONR) Data &amp; Analytics environment. The DevSecOps Engineer shall lead the implementation and execution of the technical requirements identified in <b>PWS Section 4.5 &ndash; Technical Infrastructure and Platform Support</b>, including infrastructure automation, Continuous Integration/Continuous Deployment (CI/CD), cloud security, container orchestration, Infrastructure-as-Code (IaC), and operational sustainment of the FedRAMP High and DoD Impact Level 5 (IL5) cloud environment.</p><p></p><p><br>
The DevSecOps Engineer shall architect and maintain secure cloud infrastructure, automate deployment pipelines, support AI/ML platform integration, implement cloud-native security controls, monitor system health and security events, and ensure compliance with DoD cybersecurity requirements. This position will work closely with software developers, data engineers, cloud architects, cybersecurity personnel, and Government stakeholders to deliver resilient, scalable, and secure cloud services.</p><p></p><p><br>
Duties and Responsibilities</p>
<p>
The DevSecOps Engineer shall:</p>
<ul>
<li>Design, deploy, automate, and maintain secure cloud infrastructure supporting mission applications and analytics platforms.</li>
<li>Develop, implement, and manage automated CI/CD pipelines using tools such as Jenkins, GitLab CI/CD, or equivalent technologies.</li>
<li>Build and maintain Infrastructure-as-Code (IaC) solutions utilizing Terraform, Ansible, or similar automation frameworks.</li>
<li>Implement and manage containerized application environments using Docker, Kubernetes, or comparable orchestration platforms.</li>
<li>Configure, monitor, and optimize cloud-native security services including Web Application Firewalls (WAF), Intrusion Detection/Prevention Systems (IDS/IPS), endpoint protection, and Security Information and Event Management (SIEM) platforms.</li>
<li>Analyze security logs, audit events, vulnerability reports, and SIEM alerts to identify threats, recommend mitigation strategies, and support incident response activities.</li>
<li>Support continuous Authority to Operate (ATO) compliance through configuration management, security patching, vulnerability remediation, and security documentation.</li>
<li>Implement secure API management, identity and access management (IAM), secrets management, encryption, and least-privilege access controls.</li>
<li>Develop automated monitoring, logging, alerting, and operational dashboards to improve system reliability and performance.</li>
<li>Support deployment and operationalization of AI/ML platforms and services, including cloud-native machine learning environments.</li>
<li>Collaborate with software developers, data engineers, and cloud architects to integrate security throughout the software development lifecycle (SDLC).</li>
<li>Ensure cloud infrastructure complies with DoD cybersecurity policies, FedRAMP High requirements, DoD IL5 controls, and applicable security frameworks.</li>
<li>Support system scalability, resilience, disaster recovery, and operational continuity.</li>
<li>Document system architectures, deployment procedures, security configurations, and operational processes.</li></ul><br>
<p></p>
<p>
Minimum Qualifications</p>
<p>
The DevSecOps Engineer shall meet the requirements for the <b>&quot;DevSecOps Engineer &ndash; Intermediate&quot;</b> labor category as defined in the <b>CHESS ITES-3S</b> contract vehicle and possess the following additional qualifications:</p>
<ul>
<li>Seven (7) years of combined experience in DevSecOps, DevOps, SecOps, or MLOps engineering and development.</li>
<li>Five (5) years of hands-on experience designing, securing, implementing, and maintaining cloud environments, preferably within <b>AWS GovCloud</b>, <b>Azure Government</b>, or similarly regulated cloud environments.</li>
<li>Demonstrated experience supporting cloud environments operating under <b>FedRAMP High</b>, <b>DoD Impact Level 5 (IL5)</b>, or comparable federal security requirements.</li>
<li>Verifiable experience on at least two (2) projects designing, implementing, and managing Continuous Integration/Continuous Deployment (CI/CD) pipelines using Jenkins, GitLab CI/CD, Azure DevOps, GitHub Actions, or equivalent technologies.</li>
<li>Demonstrated expertise implementing and managing containerization and orchestration technologies, including Docker, Kubernetes, OpenShift, or similar platforms.</li>
<li>Hands-on experience implementing Infrastructure-as-Code (IaC) using Terraform, Ansible, CloudFormation, or comparable automation tools.</li>
<li>Experience configuring and administering cloud-native security capabilities including Web Application Firewalls (WAF), Intrusion Detection/Prevention Systems (IDS/IPS), Security Information and Event Management (SIEM), vulnerability management, and cloud security monitoring solutions.</li>
<li>Verifiable experience analyzing security logs, SIEM data, audit records, and threat intelligence to identify vulnerabilities, investigate security events, and implement corrective actions.</li>
<li>Experience implementing secure Identity and Access Management (IAM), encryption, secrets management, and Zero Trust security principles.</li>
<li>Experience supporting automated monitoring, logging, system performance optimization, and operational sustainment of enterprise cloud platforms.</li>
<li>Strong understanding of DevSecOps best practices, secure software development lifecycle (SSDLC), and cloud security architectures.</li><br>
</ul>
<p>Qualifications</p>
<ul>
<li>Active Secret security clearance (required).</li>
<li>Current DoD 8140 (or legacy DoD 8570) cybersecurity certification applicable to privileged access functions (e.g., Security+, CySA+, CASP+, CISSP, CCSP).</li>
<li>AWS Certified DevOps Engineer &ndash; Professional, AWS Security Specialty, Azure DevOps Engineer Expert, Certified Kubernetes Administrator (CKA), or comparable cloud certifications.</li>
<li>Experience supporting AI/ML environments, including AWS SageMaker, Azure Machine Learning, or similar platforms.</li>
<li>Experience with streaming data technologies such as Apache Kafka, AWS Kinesis, or equivalent event-driven architectures.</li>
<li>Familiarity with NIST RMF, DISA STIGs, FedRAMP, Zero Trust Architecture, and DoD cybersecurity compliance requirements.</li></ul></div>

DevSecOps Engineer

NEXT Ventures

<div>
 <strong>
  Who We Are
  <br/>
  <br/>
 </strong>
 NEXT Ventures is where ambition takes shape and momentum becomes movement. As a global platform revolutionising access to performance-based capital, we empower the world's most driven individuals to rise. Through our flagship brand, FundedNext, we empower dreamers to become doers, and potential to turn into performance. With 500+ driven minds across five countries, we power a global rhythm &mdash; 220,000+ daily users from 170+ nations, each chasing greatness in their own way.
 <br/>
 <br/>
 <strong>
  Your Role in Our Mission
  <br/>
  <br/>
 </strong>
 We're growing our Platform Engineering team and looking for a DevSecOps Engineer who lives and breathes modern DevSecOps and cloud-native practices. You'll help build, automate, secure, and operate the infrastructure behind multiple customer-facing SaaS products running on AWS and Kubernetes, fronted by Cloudflare at the edge.
 <br/>
 <br/>
 This is a hands-on role for someone who treats infrastructure as code, automates relentlessly, and uses AI tooling to move faster without cutting corners. You'll share ownership of reliability, deployment pipelines, and platform tooling &mdash; and have real influence over how we scale as the team and the load grow.
 <br/>
 <br/>
 <strong>
  How You'll Make An Impact
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Build and operate cloud-native infrastructure on AWS using infrastructure-as-code.
  </li>
  <li>
   Own and improve CI/CD pipelines &mdash; making deployments faster, safer, and more self-service for product engineering teams.
  </li>
  <li>
   Run and harden Kubernetes (EKS) workloads: scaling, resource management, observability, and cluster health.
  </li>
  <li>
   Manage edge, CDN, and security through Cloudflare &mdash; DNS, WAF, rate limiting, and DDoS protection.
  </li>
  <li>
   Embed security into the platform &mdash; secrets management, least-privilege IAM, and shift-left practices baked into pipelines.
  </li>
  <li>
   Leverage AI tooling (coding assistants, automation, ops copilots) to accelerate delivery, reduce toil, and improve quality.
  </li>
  <li>
   Participate in a shared on-call rotation with solid runbooks and blameless post-incident reviews.
  </li>
  <li>
   Continuously reduce manual toil through automation and better tooling.
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  What You Bring
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   3&ndash;5 years of hands-on experience in DevOps or Infrastructure engineering.
  </li>
  <li>
   Strong command of DevOps practices and tooling &mdash; CI/CD, version control (Git), automated testing/deployment, and configuration management.
  </li>
  <li>
   Solid cloud-native experience: containers (Docker), orchestration (Kubernetes), and a major cloud provider (AWS strongly preferred).
  </li>
  <li>
   Proficiency with infrastructure-as-code (Terraform, CloudFormation, Pulumi, or similar).
  </li>
  <li>
   Scripting/automation ability in Python, Bash, or Go.
  </li>
  <li>
   Security-aware engineering &mdash; secrets management, least-privilege IAM, and shift-left security baked into pipelines.
  </li>
  <li>
   Edge / CDN / WAF experience &mdash; managing DNS, WAF, and DDoS protection at the edge (Cloudflare strongly preferred).
  </li>
  <li>
   AI-efficient mindset &mdash; you actively use AI/LLM tools to boost productivity and problem-solving, and have good judgment about where they help and where they don't.
  </li>
  <li>
   Strong troubleshooting instincts across DNS, CDN, networking, origin, and application layers.
  </li>
  <li>
   You must demonstrate active, daily use of modern AI agentic workflows &mdash; well beyond basic ChatGPT prompts or Copilot autocomplete. We expect fluency with AI coding agents (Claude Code, Cursor, Windsurf, or similar), project-level AI configuration (CLAUDE.md, rules files), agentic task delegation, and AI-driven code review. The bar is 5&ndash;10x productivity through AI-augmented development. Candidates who are not AI-native in their engineering workflow will not advance.
  </li>
  <li>
   Deep hands-on Cloudflare experience &mdash; WAF custom rules, Workers, Bot Management, or Turnstile. Strong Cloudflare knowledge is a significant advantage and will be prioritized.
  </li>
  <li>
   Experience operating fintech, trading, or other high-availability / regulated platforms.
  </li>
  <li>
   EKS-specific production experience (HPA, cluster autoscaling, PDBs, service mesh).
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Your Journey After Applying
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   30-minute HR session with the Talent Acquisition team.
  </li>
  <li>
   60-minute technical session with the Platform Squad Lead (hiring manager).
  </li>
  <li>
   Technical assessment &mdash; a hands-on infrastructure / system-design exercise.
  </li>
  <li>
   Final session with Engineering leadership.
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Why Join NEXT
  <br/>
  <br/>
 </strong>
 At NEXT Ventures, performance is more than numbers &mdash; it's the pulse that drives innovation and impact. Join us to build and harden the platform that lets a global community of traders perform at their best, every second of every day. Here, infrastructure isn't a back office &mdash; it's the engine room of the entire business, and the engineers who run it shape how fast we can grow.
 <br/>
 <br/>
 <strong>
  Your next chapter in building at scale begins here.
  <br/>
  <br/>
 </strong>
 Experience level: Senior
</div>


General Dynamics Information Technology

<div></div><div><div><div>Clearance Level
<div>Secret</div>
</div><div></div><div>Category
<div>Software Engineering</div>
</div><div></div><div>Locations
<div>Remote, Working from the USA
<br>
Remote, Based in District of Columbia
<br>
Remote, Based in Maryland
</div></div><div>
</div></div><div><div>Key Skills For Success
</div><div><p>Containerization Software</p>
</div><div><p>GitLab CI/CD</p>
</div><div><p>Kubernetes Orchestration</p>
</div><div><p>Software Delivery</p>
</div></div><div></div><div><div><div><div><div><div>
</div></div></div><div><h5 class="jobSectionHeader"><b>REQ#:</b><b> </b><b>RQ222176</b></h5>
<h5 class="jobSectionHeader"><b>Public Trust:</b><b> </b><b>None</b></h5>
<h5 class="jobSectionHeader"><b>Requisition Type:</b><b> </b><b>Regular</b></h5>
<h5 class="jobSectionHeader"><b>Your Impact</b></h5>
<p>Own your opportunity to support our nation's defense. Make an impact by connecting and securing critical operations across the globe, keeping our country safe and secure.</p>
<h2 class="jobSectionHeader"><b>Job Description</b></h2>
<div><p><b>Principal DevSecOps / Platform Engineer</b><br>
<br>
</p><p>We are seeking a developer-focused DevSecOps engineer to join a high-performing team building and operating software factories, security automation platforms, and AI-enabled development environments for Department of Defense and Federal customers. This role emphasizes hands-on software development within a DevSecOps context - you will write production code, build tooling, and develop applications, not just configure pipelines.</p>
<p></p><p>The team supports multiple concurrent internal R&amp;D efforts and customer delivery engagements across defense and federal programs. You will contribute to a range of workstreams including agentic AI application development, software factory platform enhancements, security and compliance automation, and secure software delivery for classified environments.</p>
<p></p><p><b>MEANINGFUL WORK AND PERSONAL IMPACT</b></p>
<ul><li><p>Work across a broad portfolio rather than a single narrow program - variety and exposure to cutting-edge problems in government software delivery</p>
</li><li><p>Significant investment in AI, automation, and modern platform engineering - not legacy maintenance</p>
</li><li><p>Small, senior team where individual contributions have outsized impact</p>
</li><li><p>Opportunity to shape how the our customers' missions are built and delivered using secure software at scale</p>
</li><li><p>Exposure to Growth activities (proposals, customer engagements) for engineers who want to develop business acumen alongside technical depth</p>
</li></ul><p></p><p><b>KEY RESPONSIBILITIES</b></p>
<p><b>DevSecOps Engineering - Primary Focus</b></p>
<p>Utilize AI-assisted Development tools and frameworks to:</p>
<ul><li><p>Design, develop, and maintain CI/CD pipelines for build, test, security scanning, and release across unclassified and classified environments</p>
</li><li><p>Integrate and operate security scanning toolchains (SAST, SCA, container scanning, SBOM generation) as automated pipeline stages</p>
</li><li><p>Use AI-assisted development workflows daily &mdash; code generation, automated testing, intelligent code review, and documentation &mdash; and champion their adoption across teams</p>
</li><li><p>Contribute to the development of agentic AI capabilities including tool orchestration, prompt engineering, and workflow automation</p>
</li><li><p>Build tooling and automation to support continuous Authority to Operate (cATO) processes, including automated evidence collection, compliance reporting, and policy enforcement</p>
</li><li><p>Develop and maintain hardening pipeline templates that product teams consume for secure-by-default software delivery</p>
</li><li><p>Support platform's security pipeline layer &mdash; build, test, and release process for software packages that include both application code and runtime platform components</p>
</li><li><p>Implement and enforce software supply chain security controls (signing, provenance, artifact integrity)</p>
</li><li><p>Troubleshoot build and deployment failures, support development teams consuming shared pipeline services</p>
</li></ul><p></p><p><b>Platform Engineering</b></p>
<ul><li><p>Deploy and operate Kubernetes clusters (Big Bang / Iron Bank baseline) in classified (CUI/IL5) environments</p>
</li><li><p>Deploy, configure, and support AI-powered development tools (GitLab Duo, LLM-based code assistants, agentic AI frameworks) for platform consumers and internal team use</p>
</li><li><p>Support AI/ML platform infrastructure (model serving, GPU workloads, data pipelines) as part of the broader platform offering</p>
</li><li><p>Stand up and maintain shared platform services: Harbor (container registry), Nexus (artifact repository), Vault (secrets management), ArgoCD (GitOps deployment)</p>
</li><li><p>Implement Infrastructure-as-Code for environment provisioning, cluster lifecycle, and configuration management (Terraform, Ansible)</p>
</li><li><p>Support multi-cluster management and hub/spoke deployment models &mdash; build in shared services, deploy into downstream accounts</p>
</li><li><p>Configure and troubleshoot network connectivity, Zscaler integration, and Okta/SAML identity federation for platform consumers</p>
</li><li><p>Contribute to platform evolution including self-service namespaces, developer onboarding, and golden-path templates</p>
</li><li><p>Maintain and improve multiple production software factory environments serving diverse federal customers</p>
</li><li><p>Contribute to runbooks, operational documentation, and incident response procedures</p>
</li></ul><p></p><div><b>WHAT YOU&rsquo;LL NEED TO SUCCEED - REQUIRED SKILLS</b>
<br>
Bring your engineering expertise along with a drive for innovation to GDIT. The DevOps Engineer Principal must have:
<ul><li>Education: Bachelor's degree and 8+ years experience. In lieu of degree 12+ years of hands-on experience
</li><li>Experience: 5+ years of related experience in Software Engineering, DevOps / DevSecOps technologies; 3+ years of hands on experience with Kubernetes</li></ul></div>
<ul><li><p>Experience using AI-powered development tools (code assistants, LLM-based tooling, AI-augmented workflows) in daily engineering work &mdash; and enthusiasm for pushing their adoption forward</p>
</li><li><p>Hands-on experience with CI/CD pipeline development &mdash; GitLab CI strongly preferred; Jenkins, GitHub Actions, or similar accepted</p>
</li><li><p>Experience integrating security scanning tools into automated pipelines (SAST, DAST, SCA, container image scanning)</p>
</li><li><p>Proficiency with Infrastructure as Code (Terraform and/or Ansible)</p>
</li><li><p>Experience with containerization (Docker, Helm, OCI artifacts) and container registry management</p>
</li><li><p>Strong Linux systems skills &mdash; administration, shell scripting, troubleshooting</p>
</li><li><p>Solid understanding of Git-based workflows, branching strategies, and GitOps deployment patterns</p>
</li><li><p>Experience working in or deploying to classified or air-gapped environments</p>
</li><li><p>Ability to work across multiple concurrent projects with shifting priorities</p>
</li><li><p>Strong written and verbal communication skills</p>
</li><li><p><b>Security clearance level</b>: Secret Clearance required to start</p>
</li><li><p><b>Location</b>: Remote with travel up to 10%</p>
</li><li><p><b>Citizenship:</b> US Citizenship</p>
</li></ul><p></p><p><b>PREFERRED QUALIFICATIONS</b></p>
<ul><li><p>Experience with Platform One / Big Bang, Iron Bank baselines, or DoW-hardened Kubernetes distributions</p>
</li><li><p>Familiarity with DoW security and authorization frameworks (NIST 800-53, RMF, cATO, software factory authorization patterns)</p>
</li><li><p>Knowledge of software supply chain security practices &mdash; artifact signing, attestation, and SBOM generation (e.g., Sigstore/Cosign, Syft, in-toto)</p>
</li><li><p>Experience deploying or operating AI/ML infrastructure or AI development platforms in enterprise or air-gapped environments (model serving, GPU scheduling on K8s, enterprise code-assistant rollout)</p>
</li><li><p>Experience supporting growth activities &mdash; contributing to proposals, RFI responses, or technical briefings, and engaging customers as a technical SME</p><br>
</li></ul><div><br>
<b>GDIT IS YOUR PLACE</b>
<br>
At GDIT, the mission is our purpose, and our people are at the center of everything we do.
<ul><li>Growth: AI-powered career tool that identifies career steps and learning opportunities
</li><li>Support: An internal mobility team focused on helping you achieve your career goals
</li><li>Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off
</li><li>Community: Award-winning culture of innovation and a military-friendly workplace
</li></ul><br>
<b>OWN YOUR OPPORTUNITY</b>
<br>
Explore a career in software development at GDIT and you&rsquo;ll find endless opportunities to grow alongside colleagues who share your dedication to advancing innovation.
</div></div></div><div><div><div><h3 class="jobSectionHeader"><b>Work Requirements</b></h3>
</div></div><div></div><div><div>Years of Experience
<p>8 + years of related experience</p>
<ul><li>may vary based on technical training, certification(s), <b><i>or</i></b> degree</li></ul>
</div><div></div><div>Certification
</div><p></p><div>Travel Required
<p>Less than 10%</p>
</div><div></div><div>Citizenship
<p>U.S. Citizenship Required</p>
</div></div></div></div><div><h3 class="jobSectionHeader"><b>Salary and Benefit Information</b></h3>
<p>The likely salary range for this position is $113,900 - $154,100. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.
</p>
<h3 class="jobSectionHeader"><b>Our Identity Verification Process</b></h3>
<p>As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.</p>
<h3 class="jobSectionHeader"><b>About Our Work</b></h3>
<div></div><p>We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.</p>
<p>Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.</p>
<p><i>Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans</i></p></div></div></div></div>

Principal DevSecOps / Platform Engineer

Teknoluxion

<div>Overview:
<div><div><b>
Senior Cloud Engineer</b></div><div><b>
Springfield, VA or St. Louis, MO (hybrid role)</b></div><div><b>
Active TS </b><b>(SCI eligibility) </b><b>clearance and eligibility to obtain a CI poly</b></div></div><div></div><div><div><div><br>
At Bcore, our strength comes from how we deliver impact to the mission. Whether it&rsquo;s architecting critical IT solutions, producing actionable intelligence, or developing cutting edge technology, we succeed because of the expertise, collaboration, and agility of our teams. Our Mission Services division combines enterprise IT, cloud solutions, DevSecOps, systems engineering, software development, and operational support. Bcore accelerates decisive advantage for warfighters and intelligence professionals by fusing human insight, rapid-fire engineering, precision-measured outcomes, and relentless grit into mission-ready solutions.</div></div><div></div><div><div><br>
Do you want to join a team that is building tailored technical solutions to modernize our government&rsquo;s mission and our client&rsquo;s business? Do you have a desire to change how people work? Are you interested in helping to protect our nation&rsquo;s cyber interests? Join our growing team as a <b>Senior Cloud Engineer</b>, supporting the <b>NGA</b> customer mission.</div></div></div>
Responsibilities:
<div><b>What you get to do every day:</b></div><div></div><div><br>
In this role, you'll join our Common Operations Release Environment (CORE) team, providing high-quality, cost-effective cloud solutions to our clients. Be part of a dynamic environment where your expertise in cloud operations will drive significant enhancements in the efficiency and effectiveness of our customers' operations. As a Cloud Engineer on our team, you will be responsible for distributed and managed services automating the installation, configuration and maintenance of platform services.</div><div></div><div><b><br>
Specific Duties &amp; Responsibilities</b>:</div><ul><li>
Maintain and improve existing build and deployment processes using CI/CD tools to automate and optimize service deployments within development, test, and production systems.</li><li>
Integrate with enterprise authentication services</li><li>
Maintain and improve existing infrastructure (build out autoscaling, support new services, optimize for cost efficiencies/authentication/search, etc.)</li><li>
Manage and aggregate server logs and monitor for security and system related incidents</li><li>
Monitor and analyze system performance, such as server load and resource usage</li><li>
Apply configuration management disciplines to maintain software revisions, security patches, hardening, and documentation along with maintaining documentation and ensuring continuity of recurring tasks</li><li>
Enforce best practices for security and reliability, and drive security initiatives, like access control and vulnerability testing</li><li>
Work with A&amp;A Teams to maintain security requirements for operation of systems</li><li>
Follow up on engineering tasks for operational solutions, and validate completion</li><li>
On-call support will be required</li></ul>
Qualifications:
<div><div><div><div><b>
Clearance Required: </b>Active TS clearance (with SCI Eligibility) and eligibility to obtain CI Poly</div><div></div><div><b><br>
Education/Experience:
</b></div><ul><li>Requires Bachelor's degree</li><li>
5+ years of experience</li></ul></div><div><b>
Required Skills:</b><br>
</div></div><ul><li>
AWS serverless infrastructure components</li><li>
Willingness to learn cross-domain services available at NGA</li><li>
A working understanding of TypeScripe, JavaScript, Python, Bash</li><li>
Multi-platform integration (connecting processes and services between AWS, GitLab, OpenShift, Nexus, Self Service)</li><li>
GitLab CI/CD pipelines, typically centered around deploying or updating applications/services in OpenShift or AWS</li><li>
Strong understanding of DevSecOps and software/application development processes</li><li>
Understanding of GitLab or other DevSecOps/Continuous Integration tools</li><li>
Knowledge of network technologies, common infrastructure components, load balances, firewalls, virtual and physical infrastructure design</li></ul><div><b>
What is ideal?</b></div></div><ul><li>
Background as a system administrator</li><li>
Cross Domain engineering</li><li>
AWS Diode</li><li>
Security+ Certification</li><li>
Undersatnding of access management and security groups (I.e. IAM, S3 bucket, SSH, VPN, etc.)</li><li>
Ability to write and use unit and fuctional testing</li><li>
Experience using Jira and Confluence</li><li>
Strong written and oral communication</li><li>
Customer engagement</li><li>
Intelligence Community Experience preferred</li></ul>
What you can expect from us:
<ul><li>Recognizing great achievements do not go unnoticed by bcore through service anniversaries, spot awards, and employee referral bonuses</li><li>
You&rsquo;ll join a growing organization of passionate, top-shelf, IT engineering professionals with extensive experience in actively developing the technology revolution in the Intelligence community
</li><li><div>The expected salary range within the Washington, DC metropolitan area is: $148,000-$179,000. Final compensation is unique to each individual and will be determined based on factors such as experience, education, geographic location, and contractual requirements. This is not a guarantee.</div></li><li><div>
Benefits include Health/Dental/Vision, 401(k), Paid Time Off, STD/LTD/Life Insurance/Voluntary Life Insurance, Stipends, Referral Bonuses, and more.</div></li></ul><div><i>
BCore is proud to be an equal opportunity workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, sexual orientation or any other characteristic protected by law.</i></div></div>

Senior Cloud Engineer

Agile5 Technologies, Inc.

<div><p><b>About Agile5</b>: Agile5 Technologies, Inc., is a Woman-Owned Small Business (WOSB) and Information Technology (IT) services firm that specializes in the design, development, testing, integration, and maintenance of enterprise software systems. We believe our employees are the company&rsquo;s most valuable asset. We are invested in seeing our employees grow in their careers, while maintaining a work/life balance. We are searching for a skilled, energetic, and focused Senior Cloud Developer.</p><p><b>
Description: </b>Agile5 Technologies is seeking a high-authority Senior Cloud Developer to design, build, and optimize secure, high-bandwidth hybrid cloud architectures. Operating onsite full-time in Chantilly, VA, this role is responsible for developing advanced cloud service delivery models (PaaS, IaaS, SaaS, DaaS) and executing complex migrations from on-premises systems to secure government enclaves. The ideal candidate will possess deep expertise in DevSecOps automation, multi-enclave security requirements, and architectural frameworks to maximize performance, scalability, and cost efficiency.</p><p><b>
Senior Cloud Developer Job Duties:</b></p><ul><li><p>
Develop innovative cloud service delivery models and structural frameworks to enable and sustain IaaS, PaaS, SaaS, and DaaS solutions.</p></li><li><div>
Implement robust automation for cloud resources using DevSecOps best practices, maintaining highly secure CI/CD pipelines for zero-downtime cloud deployments.</div></li><li><div>
Analyze legacy on-premises applications, provide data-driven recommendations, and systematically develop and migrate workloads into modern cloud stacks.</div></li><li><div>
Formulate architectural strategies for failure/recovery (DR), business continuity, high availability/uptime design, and cost optimization of cloud services.</div></li><li><div>
Work independently to design, develop, test, and debug next-generation software products engineered specifically for native cloud platforms.</div></li><li><div>
Establish, secure, and monitor cloud stacks across complex multi-enclave systems spanning Unclassified, Secret, and Top Secret classifications.</div></li><li><p>
Collaborate cross-functionally with development and infrastructure teams while actively participating in Program Increments (PIs) and Agile Release Train (ART) milestones under the SAFe Agile framework.</p></li></ul><p><b>
Security Clearance Requirements:</b> Active Top Secret with SCI eligibility (TS/SCI) required, and the ability to obtain a CI Polygraph within 90 days of starting employment. Candidates must already possess this clearance level upon applying. Must be a U.S. citizen due to the nature of work.</p><p><b>
Experience Requirements</b>: Requires expert-level proficiency deploying within AWS GovCloud, SC2S, and C2S platforms. Deep mastery over Terraform for cloud resource lifecycle automation. Heavy operational experience with Docker and Kubernetes microservices orchestration. Strong understanding of strict government cloud security compliance requirements alongside enterprise monitoring and logging solutions. Years of experience depend on highest level of education acquired by candidates.</p><p><b>
Education Requirements</b>: Candidates must match one of the following education and experience combinations:</p><ul><li><p>
Master&rsquo;s or Bachelor&rsquo;s Degree in relevant field: Minimum of 8 years of directly related cloud software development experience.</p></li><li><div>
Associate Degree: Minimum of 11 years of directly related experience.</div></li><li><p>
High School Diploma / GED: Minimum of 14 years of directly related experience.</p></li></ul><p><b>
Desired Skills / Qualifications</b>:AWS Certified Solutions Architect (Professional) or AWS Certified DevOps Engineer (Professional) certifications preferred. Experience in scripting and coding within Python, .NET C#, or other advanced development languages. Hands-on familiarity with serverless computing (AWS Lambda, S3), database services (RDS, DynamoDB), and advanced cloud networking/VPC configuration. Experience utilizing Elasticsearch, Splunk, and cloud security accreditation processes (A&amp;A).</p><p><b>
Location</b>: On-site in Chantilly, VA</p><p><b>
Status</b>: Full time</p><p><b>
Schedule</b>: Day shift, Monday&ndash;Friday</p><p><b>
Physical Requirements</b>: Must be able to remain in a stationary position for long durations of time. Also, must be able to continuously operate a computer and other office productivity machinery.</p><p><b>
Travel Required</b>: No</p><p>
This job description is subject to change at any time.</p><p>
We are an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law.</p></div>

Senior Cloud Developer

malomatia

<div>
 <strong>
  Job Description
  <br/>
  <br/>
 </strong>
 We are seeking a skilled
 <strong>
  Application Security Specialist
 </strong>
 to join our Cybersecurity Practice. In this role, you will work closely with our application security, development, and QA teams to secure our clients&rsquo; applications across their entire lifecycle. You will conduct security testing, perform penetration tests, and assess vulnerabilities across web, mobile, API applications.
 <br/>
 <br/>
 Your responsibilities will span application penetration testing, automated security scanning (SAST, DAST, SCA), threat modelling, secure code review, and developer enablement. You will embed security best practices throughout the software development lifecycle and ensure that applications are designed and built with robust security controls.
 <br/>
 <br/>
 You will collaborate with development and DevOps teams to integrate security into CI/CD pipelines, triage and validate findings, and provide clear, actionable remediation guidance. The role requires hands-on technical expertise, strong analytical skills, and the ability to translate complex security findings into practical fixes that developers can implement.
 <br/>
 <br/>
 <strong>
  Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Penetration Testing:Conduct penetration tests on web applications, mobile applications, APIs, and thick-client applications. Prepare detailed reports with clear risk ratings and actionable remediation recommendations.
  </li>
  <li>
   Security Scanning:Implement, tune, and manage automated security scanning tools (SAST, DAST, SCA) to continuously identify vulnerabilities in code, configurations, and third-party dependencies across all application types.
  </li>
  <li>
   Threat Modelling:Perform threat modelling to identify potential security risks and attack surfaces associated with applications early in the design process, and provide guidance on mitigating these risks.
  </li>
  <li>
   Secure Code Review:Review application source code for security vulnerabilities across multiple platforms and languages, and offer practical, developer-friendly recommendations for remediation.
  </li>
  <li>
   DevSecOps Integration:Integrate security testing and controls into CI/CD pipelines, enabling continuous and automated security validation as part of the development workflow.
  </li>
  <li>
   Training &amp; Awareness:Develop and deliver secure coding training sessions and workshops to raise application security awareness among development teams and other stakeholders.
  </li>
  <li>
   Tool Evaluation:Assess and recommend tools and technologies to enhance application security testing and monitoring capabilities across various platforms.
  </li>
  <li>
   Documentation:Create and maintain comprehensive documentation related to security assessments, vulnerability management, and application security standards and policies.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Education: Bachelor&rsquo;s / college degree in Computer Science, Information Security, or a related field.
  </li>
  <li>
   Experience: At least 3 years of experience in application security, secure software development, penetration testing, or a closely related field.
  </li>
  <li>
   Certifications: Relevant professional certifications are highly desirable. These may include, but are not limited to:
  </li>
  <ul>
   <li>
    OffSec certifications (e.g., OSWA, OSWE)
   </li>
   <li>
    eLearnSecurity (e.g., eWPT, eWPTX)
   </li>
   <li>
    GIAC / SANS (e.g., SEC542, GWAPT)
   </li>
   <li>
    BCSP or other application security certifications.
   </li>
  </ul>
  <li>
   Technical Skills: Proficiency with security testing tools such as Burp Suite (required), and familiarity with Snyk, HCL AppScan, Fority, and Postman (preferred). Strong understanding of secure coding practices and hands-on experience with at least one programming language. Familiarity with DevSecOps practices and CI/CD pipelines is preferred.
  </li>
  <li>
   Knowledge: In-depth knowledge of application security principles and practices, with strong familiarity with security frameworks and guidelines (e.g., OWASP Top 10, ASVS, MASVS, WSTG, MSTG). Understanding of common vulnerability classes, exploitation techniques, and remediation strategies. Knowledge of Qatar National Information Assurance (NIA) is a plus.
  </li>
 </ul>
</div>


Application Security

Steampunk

<div>Overview:
<div><b>
Who We Are</b></div><div>
Steampunk is the explosive collision of human-centered design and traditional government contracting. An employee-owned company with a startup mindset and time-tested approaches tailored for the federal government, we&rsquo;re passionate about creating solutions that are impactful, practical, scalable, and most importantly, that meet our clients&rsquo; ever-changing needs.</div><div></div><div><br>
At Steampunk, we believe in disrupting the status quo and setting the pace in the ecosystem of government contractors, while repurposing tried-and-true methodologies. We believe in empowering our people to find creative solutions to intractable problems. We believe the best environment in which to grow and thrive is outside our comfort zone.</div><div></div><div><br>
While good design makes for a good product, we believe human-centered design makes for an excellent one. We also believe effective teams are powered by diverse perspectives, backgrounds, and experiences. To that end, Steampunk is an equal opportunity employer committed to promoting diversity of race, gender, sexual orientation, religion, ethnicity, national origin, disability status, and protected veteran status, amongst our ranks. Additionally, we participate in the E-Verify program.</div>
Contributions:
<p>
As a <b>Software Developer</b>, you will work with our growing DevSecOps practice delivering software features, APIs, and microservice solutions within an AI-enabled search environment. We are looking for candidates with experience in Agile software development and DevSecOps practices such as build/release management, CI/CD, and test automation. Responsibilities include:</p><ul><li>
Design, develop, and deploy modular microservices in a cloud-based system</li><li>
Translate stakeholder needs into technical solutions and convey tradeoffs to the team</li><li>
Write and debug code for innovative software solutions</li><li>
Troubleshoot software quality, security, and reliability issues</li><li>
Participate in code reviews and quality assurance activities</li><li>
Write and maintain unit and functional tests</li><li>
Write code with security best practices in mind</li><li>
Identify and resolve technical problems and software defects</li><li>
Document software code, features, and training guides</li><li>
Leverage virtualization and containerization within existing cloud-based systems</li><li>
Integrate and implement AI-enabled features and services, including AI-enhanced search capabilities and integration with search platforms and AI/ML APIs</li><li>
Provide technical guidance to junior team members</li></ul><br>
<div></div>
Qualifications:
<div><b>
Required:</b></div><ul><li>
Ability to obtain a U.S. government Security Clearance</li><li>
Bachelors degree and 5+ years of total experience<ul><li>
No degree and 9+ years of total experience</li><li>
Associates degree and 7+ years of total experience</li><li>
Master's degree and 3+ years of total experience</li></ul></li><li>
3-5 years of experience with one or more programming languages (Python, Java, JavaScript/TypeScript)</li><li>
Experience with Git</li><li>
Experience with one or more cloud platforms (AWS, Azure, or GCP)</li><li>
Experience with CI/CD pipelines</li><li>
Experience with containerization using Docker</li><li>
Experience with automated testing frameworks (e.g., pytest, JUnit, Jest, Cypress)</li><li>
Experience with Python web frameworks (e.g., FastAPI, Flask, Django)</li><li>
Experience with REST API design and development</li></ul><div><b>
Preferred:</b></div><ul><li>
Associate-level cloud certification (AWS, Azure, or GCP)</li><li>
Experience with React, particularly in a production environment</li><li>
Experience with AI/ML APIs and tooling (e.g., AWS Bedrock, OpenAI, LangChain)</li><li>
Experience with vector search or semantic search technologies</li><li>
Experience with search platforms such as OpenSearch or Solr</li></ul><br>
<div></div>
About <b>steampunk</b>:
<div>
Steampunk relies on several factors to determine salary, including but not limited to geographic location, contractual requirements, education, knowledge, skills, competencies, and experience. The projected compensation range for this position is $85,000 to $170,000. The estimate displayed represents a typical annual salary range for this position. Annual salary is just one aspect of Steampunk&rsquo;s total compensation package for employees. Learn more about additional Steampunk benefits here.</div><div></div><div><b><br>
Identity Statement</b></div><div>
As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.</div><div></div><div><br>
Steampunk is a <b>Change Agent</b> in the Federal contracting industry, bringing new thinking to clients in the Homeland, Federal Civilian, Health and DoD sectors. Through our <b>Human-Centered delivery methodology</b>, we are fundamentally changing the expectations our Federal clients have for true shared accountability in solving their toughest mission challenges. As an <b>employee owned company</b>, we focus on investing in our employees to enable them to do the greatest work of their careers &ndash; and rewarding them for outstanding contributions to our growth. If you want to learn more about our story, visit http://www.steampunk.com.</div><div></div><div><i><br>
We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Steampunk participates in the E-Verify program.</i></div></div>

Software Developer

Search 998+ Devsecops engineer jobs near you this August. New roles added regularly across leading industries. Apply today.

998 devsecops engineer jobs Near Me

DevSecOps Engineer

DevSecOps Engineer

Principal DevSecOps / Platform Engineer

Senior Cloud Engineer

Senior Cloud Developer

Application Security

Software Developer