DevSecOps Engineer

Job Description

Job Title: DevSecOps Engineer

Location: Remote

Security Clearance: Active DoD Secret Clearance

We question. We listen. We adapt.

Be honest. Be pragmatic.

Omni Federal , founded in 2017 and headquartered in Washington, DC, is a highly specialized software solutions provider with a robust presence in key locations across the United States, including Boston, MA, Colorado Springs, CO, San Antonio, TX, and St. Louis, MO. Born out of the Department of Defense's software factory ecosystem, Omni has rapidly distinguished itself by delivering both mission-critical and enterprise solutions that enhance the technological capabilities of the federal government. With a focus on areas such as Command and Control, Cybersecurity, Space, Geospatial, and Modeling & Simulation, Omni leverages cutting-edge commercial technology tailored to government objectives, improving mission performance and delivering transformative outcomes for the Department of Defense (DoD), Intelligence Community (IC), and their end-users. The company's innovative approach is backed by its Omni Labs and SBIR Innovation centers, where they develop advanced platforms and tools in data mesh, secure connectivity, and intelligent automation.

Why Omni?

• Environment of Autonomy
• Innovative Commercial Approach
• People over process

We are seeking an experienced DevSecOps Engineer to support the Air Force to help in developing and operating modernized applications that are used daily by the warfighter. This is an exciting new initiative where the Air Force is mirroring Silicon Valley processes and capabilities to quickly deploy new capabilities. Candidates must be passionate, energized, and excited to work on modern architectures and solve challenging problems for our clients.

Position Description (what you will do)

• Support the design, build, and maintenance of CI/CD pipelines (e.g., GitLab CI, Jenkins, ArgoCD/GitOps, or comparable tools) that automate the build, testing, and deployment of containerized data platform components (Spark, Kafka/MSK-based services, Airflow, API services) into Kubernetes, integrating with the platform's existing container hardening and image-approval pipeline (owned by a separate team).
• Support Kubernetes cluster operations for the data lakehouse platform - provisioning, scaling, patching, and troubleshooting - across GovCloud environments.
• Implement and maintain Infrastructure-as-Code (Terraform) for platform AWS GovCloud resources, alongside Kubernetes manifests and Helm charts.
• Support Authorization to Operate (ATO)/RMF continuous monitoring activities, including generating evidence and assisting with remediation of findings.
• Support secrets management, identity, and access control practices (e.g., HashiCorp Vault or comparable) across the platform.
• Support observability tooling (e.g., Prometheus, Grafana, or comparable logging/monitoring stacks) to help monitor platform health and pipeline performance.
• Pick up well-articulated DevSecOps tasking largely on their own, translating requirements into working automation and infrastructure.

Requirements:

• 5+ years of professional DevSecOps/platform engineering experience, including hands-on CI/CD pipeline work and Kubernetes operations.
• General familiarity with consuming and deploying DoD Iron Bank-approved (or similarly hardened) container images within CI/CD pipelines and Kubernetes environments; image hardening itself is owned by a separate team.
• Experience with Infrastructure-as-Code (Terraform) and GitOps-based deployment (e.g., ArgoCD), or comparable tools, in a cloud environment, AWS preferred.
• Familiarity with ATO/RMF continuous monitoring concepts and supporting security/compliance evidence generation.
• Proficiency with scripting/automation (Python, Bash) and CI/CD tooling such as GitLab CI, Jenkins, or similar.
• Familiarity with secrets management and access control practices in a Kubernetes environment (e.g., HashiCorp Vault or comparable).

Nice to Have:

• Experience supporting DoD or Intelligence Community programs, particularly Platform One or other DoD software factory environments.
• Experience with data platform technologies such as Kafka/MSK, Spark, or Airflow, or comparable tools.
• Familiarity with service mesh technologies (e.g., Istio) and observability stacks (Prometheus/Grafana, ELK).
• Relevant certifications (e.g., CKA/CKS, AWS Security, or DoD 8570-qualifying certifications such as Security+).
• Experience with policy-as-code/admission control tools (e.g., OPA/Gatekeeper, Kyverno).

Our team is always hungry for more - more knowledge, more problem solving, more growth, more innovation, and, ultimately, customer success. This hunger and hustle fuel our determination to excel in everything we do. It's not just about meeting established goals; it's about exceeding them. We take immense pride in applying our expertise in cutting-edge technologies and our ability to adapt to emerging trends directly to the users in the field, as our nation's protectors deserve nothing less.

Omni Federal is an equal opportunity and affirmative action employer. Omni Federal is committed to administering all employment and personnel actions on the basis of merit and free of discrimination based on race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or status as an individual with a disability. Consistent with this commitment, we are dedicated to the employment and advancement of qualified minorities, women, individuals with disabilities, protected veterans, persons of all ethnic backgrounds and religions according to their abilities.