DevSecOps Engineer at Innovative… · Arlington

Summary: Innovative Defense Technologies (IDT) is a leading defense technology company focused on rapidly delivering mission-critical software and systems solutions to the U.S. government. The DevSecOps Engineer will improve the developer experience by integrating security and automation into the software development lifecycle, supporting engineers across multiple programs with reliable tooling and environments. Responsibilities: - Improve the developer experience by reducing friction in CI/CD pipelines and platform workflows - Help ensure software delivered to classified environments meets strict security and compliance requirements - Contribute to a repeatable, scalable Software Factory that operates consistently across connected and air-gapped environments - Support engineers across multiple programs by providing reliable tooling, environments, and guidance - Build, maintain, and troubleshoot CI/CD pipelines using tools such as GitLab CI and Jenkins, following established enterprise patterns - Integrate and operate automated security controls within pipelines, including SAST, SCA, container scanning, SBOM generation, and secrets detection - Support and maintain core Software Factory tooling (e.g., GitLab, artifact repositories, scanning tools, CI/CD infrastructure) - Develop and update Infrastructure as Code (IaC) using tools such as Ansible and Terraform, leveraging standardized templates - Deploy, configure, and maintain containerized workloads using Podman and Kubernetes (RKE2 or similar distributions) - Operate and support DevSecOps platforms within air-gapped classified environments, including: packaging and deploying dependencies troubleshooting environment-specific issues supporting repeatable software delivery without external connectivity - Assist in enforcing compliance requirements (e.g., NIST 800-171, DISA STIGs, RMF) through automation and pipeline controls - Investigate and resolve technical issues across CI/CD pipelines, infrastructure, and tooling, documenting root causes and solutions - Gather developer feedback and identify opportunities to improve platform usability, performance, and reliability - Collaborate with software engineers, security teams, and infrastructure teams to support coordinated delivery efforts Required Qualifications: - 1+ years of professional software or technical experience - Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent professional experience - U.S. citizenship - Ability to travel up to 10% - Experience in software development processes - Experience with CI/CD concepts and tools (e.g., Jenkins, GitLab CI, CircleCI) - Familiarity with containerization technologies such as Podman and container orchestration with Kubernetes - Understanding of Infrastructure as Code (IaC) principles and tools (e.g., Terraform, Ansible) - Basic scripting and programming skills (e.g., Python, Bash) - Familiarity with version control systems, particularly Git - Strong problem-solving skills and the ability to work collaboratively within a team - Excellent communication skills and a desire to learn and grow Preferred Qualifications: - Experience working in a DevSecOps or DevOps role - Hands-on experience with cloud platforms/hypervisors (e.g., AWS, vCenter) - Familiarity with secure software development practices and automated security testing tools - Knowledge of monitoring, logging, and alerting tools (e.g., Prometheus, Grafana, ELK Stack) - Experience working in defense, government, or other mission-critical domains - Familiarity with DoD compliance frameworks such as NIST, DISA STIGs, or RMF Required Skills: CI/CD tools, GitLab CI, Jenkins, CircleCI, Containerization, Podman, Kubernetes, Infrastructure as Code, Terraform, Ansible, Scripting, Python, Bash, Version control, Git, Automated security testing, SAST, SCA, Container scanning, SBOM generation, Secrets detection, Compliance frameworks, NIST 800-171, DISA STIGs, RMF Benefits: Generous benefits package, Competitive PTO, Paid holidays, 401(k) with immediate vesting and matching, 9/80 optional schedule (2nd and 4th Friday off every month), Tuition Assistance Reimbursement Program, Professional Development Resources, Pre-Tax Commuter Benefits, Organization-Wide Monthly Tech Connect Events, Annual Employee Recognition Awards, Regular Social Events and Catered Lunches