DevSecOps Engineer (w/ active Secret)

Job summary

DevSecOps Engineer (w/ active Secret) Location: Remote Clearance: Secret Type: Full-time, Remote JOB DESCRIPTION CRI*** is seeking a DevSecOps Engineer to support our federal customer.

Benefits

Qualifications

• across cloud and restricted network deployment contexts
• Automate security artifact generation including SBOM production, CVE scanning, and continuous compliance validation
• Drive adoption of Infrastructure as Code, GitOps practices, and controls-as-code across the team
• Leverage AI tooling to accelerate pipeline development, vulnerability triage, compliance remediation, and operational documentation
• Partner closely with software engineers, systems engineers, and ISSEs to embed security and compliance
• from the start of development
• Maintain and evolve deployment infrastructure across multiple secure environments, including cloud and air-gapped or intermittently connected contexts
• Support ATO processes through automated evidence generation, documentation as code, and direct collaboration with the security team
• Establish and promote standards for pipeline design, container security, secrets management, and deployment consistency
• Contribute to feature development when team capacity requires, applying security-first development practices to application code
• Maintain operational documentation including runbooks, deployment guides, and architecture diagrams as version-controlled artifacts
• Active Secret clearance

Responsibilities

• The DevSecOps Engineer is a hands-on practitioner responsible for building, automating, and sustaining the delivery infrastructure that enables mission-critical software to move fast without compromising compliance.
• You will actively build and maintain CI/CD pipelines, harden and manage Kubernetes environments, automate security compliance, and leverage AI as a force multiplier across the entire delivery lifecycle.
• When team capacity demands it, you will contribute directly to feature development - bringing a security-first perspective to application code.
• Design, implement, and maintain automated CI/CD pipelines that carry code from development through security scanning, compliance validation, and deployment into the organization and DoD environments
• Build and maintain hardened Kubernetes environments aligned to DISA STIG
• of the job, education, experience, knowledge,

Skills

Certifications

Degrees

Industry

Company size

Security clearance