DevSecOps Engineer

Responsibilities

• Design and maintain Kubernetes-based infrastructure including cluster provisioning and RBAC
• Package and deploy applications using Helm charts
• Implement policy controls using Istio, OPA Gatekeeper, and Kyverno
• Build and maintain CI/CD pipelines using GitLab CI, GitHub Actions, or Jenkins
• Deploy workloads on AWS GovCloud and Azure Government
• Manage and harden container images using Iron Bank and Platform One
• Configure observability stacks including Prometheus, Grafana, and Datadog
• Participate in ATO processes and support STIG/CIS compliance scanning
• Support air-gapped and classified environment deployments

Requirements

• 4+ years of hands-on experience with Kubernetes in production
• Experience deploying applications via Helm
• Working knowledge of Istio, OPA Gatekeeper, or Kyverno
• Experience with major CI/CD platforms (GitLab, GitHub Actions, or Jenkins)
• Hands-on experience with AWS or Azure cloud platforms
• Experience with container image workflows and OCI registries
• Familiarity with Prometheus, Grafana, or Datadog
• Experience with SSO and identity federation
• Active DoW security clearance (Secret or higher)
• U.S. citizenship required

Preferred Qualifications

• Experience with Iron Bank, Registry1, or Platform One
• Exposure to software supply chain security (Sigstore/cosign, SBOM)
• Prior work in cATO or continuous authorization environments
• CKA, CKS, or AWS GovCloud certifications
• Understanding of NIST 800-53, STIGs, RMF, or FedRAMP

About the Company

This role supports U.S. Department of War programs, focusing on delivering hardened, compliant software systems at scale within government cloud environments.