Senior DevSecOps Engineer

Job Description

Job Title: Senior DevSecOps Engineer

Location: Remote

Security Clearance: Active DoD Secret Clearance

We question. We listen. We adapt.

Be honest. Be pragmatic.

Omni Federal , founded in 2017 and headquartered in Washington, DC, is a highly specialized software solutions provider with a robust presence in key locations across the United States, including Boston, MA, Colorado Springs, CO, San Antonio, TX, and St. Louis, MO. Born out of the Department of Defense's software factory ecosystem, Omni has rapidly distinguished itself by delivering both mission-critical and enterprise solutions that enhance the technological capabilities of the federal government. With a focus on areas such as Command and Control, Cybersecurity, Space, Geospatial, and Modeling & Simulation, Omni leverages cutting-edge commercial technology tailored to government objectives, improving mission performance and delivering transformative outcomes for the Department of Defense (DoD), Intelligence Community (IC), and their end-users. The company's innovative approach is backed by its Omni Labs and SBIR Innovation centers, where they develop advanced platforms and tools in data mesh, secure connectivity, and intelligent automation.

Why Omni?

• Environment of Autonomy
• Innovative Commercial Approach
• People over process

We are seeking an experienced Senior DevSecOps Engineer to support the Air Force to help in developing and operating modernized applications that are used daily by the warfighter. This is an exciting new initiative where the Air Force is mirroring Silicon Valley processes and capabilities to quickly deploy new capabilities. Candidates must be passionate, energized, and excited to work on modern architectures and solve challenging problems for our clients.

Position Description (what you will do)

• Design, build, and maintain CI/CD pipelines (e.g., GitLab CI, ArgoCD/GitOps) that automate the build, testing, and deployment of containerized data platform components (Spark, Kafka/MSK-based services, Airflow, API services) into Kubernetes, integrating with the platform's existing container hardening and image-approval pipeline (owned by a separate team).
• Own Kubernetes cluster operations supporting the data lakehouse platform - provisioning, scaling, patching, and troubleshooting across GovCloud environments - to maintain availability and security posture.
• Implement and maintain Infrastructure-as-Code (Terraform) for the platform's AWS GovCloud resources (EMR, MSK, Glue, Aurora, S3, IAM) alongside Kubernetes manifests and Helm charts.
• Support Authorization to Operate (ATO)/RMF continuous monitoring activities - generating and maintaining evidence, remediating findings, and coordinating with ISSO and security teams on vulnerability remediation and compliance documentation.
• Implement secrets management, identity, and zero-trust access controls (e.g., HashiCorp Vault, service mesh policies) across the platform.
• Build and maintain observability tooling (e.g., Prometheus, Grafana, centralized logging) to monitor platform health, pipeline performance, and security events.
• Own assigned DevSecOps tasking independently - translate well-articulated requirements into working automation and infrastructure - with oversight and guidance available from leadership as needed, and provide technical guidance to less experienced engineers.

Requirements:

• 8+ years of professional DevSecOps/platform engineering experience, including hands-on CI/CD pipeline design and Kubernetes operations in production.
• Familiarity with consuming and deploying DoD Iron Bank-approved (or similarly hardened) container images within CI/CD pipelines and Kubernetes environments; image hardening itself is owned by a separate team.
• Strong experience with Infrastructure-as-Code (Terraform) and GitOps-based deployment (e.g., ArgoCD) in a cloud environment, AWS preferred.
• Experience supporting ATO/RMF continuous monitoring activities and working with ISSO/security teams to remediate findings.
• Proficiency with scripting/automation (Python, Bash) and CI/CD tooling (GitLab CI, Jenkins, or similar).
• Experience with secrets management, identity, and zero-trust access controls in a Kubernetes environment.

Nice to Have:

• Experience supporting DoD or Intelligence Community programs, particularly Platform One or other DoD software factory environments.
• Experience securing deployment pipelines for data platform technologies such as Kafka/MSK, Spark, and Airflow.
• Familiarity with service mesh technologies (e.g., Istio) and observability stacks (Prometheus/Grafana, ELK).
• Relevant certifications (e.g., CKA/CKS, AWS Security, or DoD 8570-qualifying certifications such as Security+).
• Experience with policy-as-code/admission control tools (e.g., OPA/Gatekeeper, Kyverno).
• Prior experience mentoring or informally leading a small technical team.

Our team is always hungry for more - more knowledge, more problem solving, more growth, more innovation, and, ultimately, customer success. This hunger and hustle fuel our determination to excel in everything we do. It's not just about meeting established goals; it's about exceeding them. We take immense pride in applying our expertise in cutting-edge technologies and our ability to adapt to emerging trends directly to the users in the field, as our nation's protectors deserve nothing less.

Omni Federal is an equal opportunity and affirmative action employer. Omni Federal is committed to administering all employment and personnel actions on the basis of merit and free of discrimination based on race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or status as an individual with a disability. Consistent with this commitment, we are dedicated to the employment and advancement of qualified minorities, women, individuals with disabilities, protected veterans, persons of all ethnic backgrounds and religions according to their abilities.