Senior DevSecOps Engineer

We are looking for a Senior DevSecOps Engineer to design, build, and enhance the automation technologies that power a critical mission planning system for our government customer. This role is important to ensure secure, reliable, and scalable automated delivery of infrastructure and applications.

This position will require at least two days per week of work on-premise at Scott AFB.


What you will do:
Infrastructure Automation: Design, implement, and extend Infrastructure-as-Code (IaC) to support consistent, repeatable, and secure environments across development, testing, and production. Use tools like Terraform, Ansible, and GitLab CI to configure and manage AWS Cloud Native services like Elastic Container Service, RDS with PostgreSQL, CloudWatch, Cloud Alarms, Elastic Load Balancers, security groups, and other services.
Build and Evolve CI/CD Pipelines: Develop and maintain automated Continuous Integration / Continuous Delivery (CI/CD) pipelines for rapid, secure, and error free deployments with no disruption in service to mission partners.
Implement DevSecOps Best Practices: Integrate security controls, compliance requirements, automated testing, and observability directly into build and deployment workflows.
Security: Align the IaC with DoD Zero Trust principles and support the upcoming Zero Trust security changes with new security automation. Interpret and, through automation, implement security mitigation from ACAS findings, STIG Guidelines, CIS Benchmarks, Zero Trust requirements, and other security standards as required by the program
·Collaborate and Mentor: Work closely with development, testing, security, and scrum master teams to plan and execute IaC in response to business need. Mentor mid-level and junior engineers through code reviews and by providing guidance.
Continuous Improvement: Identify opportunities to optimize builds, deployments, and operational process through automation and standardization.
Networking and Infrastructure Integration: Engineer and automate network configurations, security groups, VPNs, load balancers, and firewalls within cloud and hybrid environments to ensure secure, resilient connectivity.
Follow Agile Development Methodologies: Actively participate in the Agile development process by breaking epics into stories, adding acceptance criteria, estimating stories in points, and updating stories in Jira.
Monitoring and Reliability Engineering: Engineer automated monitoring, alerting, and system observability to improve system visibility, reliability, and resilience. Support the monitoring of all customer-facing environments during working hours.
Respond to System Issues: Respond to issues in all environments by providing troubleshooting expertise, repair actions, and root cause analysis. For root causes that can be fixed by DevSecOps, create an Epic, define the changes required, and work through the Agile development process to implement and deploy the fix
Provide On-Call Support at least one week per month, be available via phone and no further than 1 hour from Scott AFB
Create self-healing automation that triggers when issues occur to avoid being called for support on nights and weekends
Support Kubernetes and Containerization by collaborating / contributing to the creation of IaC for Kubernetes cluster deployment, security, and maintenance. Support the containerization of system components, providing developers with the tools and automation required for rapid declarative deployments. Extend the containerization automation through GitOps tools and methodologies.

What we like to see:
Passionate about automation
Flexible with requirement changes
Creative and pragmatic problem-solving
Enthusiastic about adopting DevSecOps
Able to work with minimal direction
Thrives when collaborating with a small team
Engineer the simplest solution: no over- or under-engineering
Ready to continually learn AWS and Kubernetes on-the-job

You Should have experience with:
RedHat Enterprise Linux operating systems
Bash Scripting
Public Key Infrastructure (certificate generation and management, mTLS communication)
Networking and routing, especially in cloud environments and through DoD firewalls
Elastic Container Service, Elastic Container Store, PostgreSQL, Elastic Kubernetes Service, Helm
Familiarity with MongoDB, IBM DataPower, Identity and Access Management, Queueing systems
AWS EC2, Networking, VPCs, etc.
Git, Gitlab, Jenkins, Artifactory, Confluence, Jenkins
Agile methodology



Requirements:
Technical Expertise: Proven experience with tools such as Terraform, Ansible, Jenkins, GitLab CI, or similar for IaC and CI/CD automation.
Cloud and Containerization: Strong background in cloud infrastructure (AWS, Azure, or GovCloud) and container orchestration (Kubernetes, Docker).
Security Automation: Hands-on experience implementing DevSecOps practices, including automated security scanning, compliance validation, and vulnerability management.
Scripting: Proficiency in one or more scripting languages such as Bash or PowerShell.
Networking and Infrastructure Integration: Experience with network configurations, security groups, VPNs, load balancers, and firewalls.
Methodology: Familiarity with Agile/Scrum development processes and modern DevOps toolchains.

Qualifications:
Security+ certification
8 or more years of experience in an engineering role (development or operations)
Bachelor’s Degree in Computer Science, Engineering, or related field




Benefits:
Paid Time Off
Medical benefits: Health Care, Vision, Dental, Long and Short Term Disability, and Life Insurance
Dependent Care and Healthcare Flexible Spending Accounts
Annual Health Reimbursement Arrangement
Education Assistance Program
401(k) Plan


This position is initially 100% on-site at Scott Air Force Base (SAFB), with the potential for hybrid remote work based on performance and project needs. This position also requires a government security clearance, so candidates must be U.S. citizens and eligible for work without a visa sponsorship