Job Requirements
Dept Of State, DC
Top Secret/SCI Polygraph not specified
Senior Level Career (10+ yrs experience)
$185,000 - $210,000
Job Description
Position Description:
The DevSecOps Engineer III designs, implements, and sustains secure, automated CI/CD pipelines and infrastructure across hybrid on-premises and cloud environments. This role integrates security controls directly into DevOps workflows, enabling continuous compliance, monitoring, and resilient system operations. The engineer partners closely with cybersecurity and infrastructure teams to support secure platform migrations, enforce hardened configurations, and ensure system integrity within classified and mission-critical environments.
The ideal candidate brings strong experience with Infrastructure as Code (IaC), containerized platforms, and CI/CD automation, along with a deep understanding of security frameworks such as RMF, NIST 800-53, and STIGs. An active TS/SCI clearance is required, and experience supporting enclave-based or air-gapped systems is highly valued.
What you'll do:
Design, implement, and maintain secure CI/CD pipelines for deployment of security tools and supporting infrastructure.
Automate infrastructure provisioning using Infrastructure as Code (IaC) across on-prem VMware and cloud environments.
Integrate security controls (SAST, DAST, container scanning, compliance checks) into DevOps workflows.
Support migration of security platforms into a dedicated enclave, ensuring minimal downtime and data integrity.
Collaborate with cybersecurity and infrastructure teams to enforce secure configurations and continuous monitoring.
Implement logging, monitoring, and alerting pipelines for system and application health.
Required Skills/Education:
Active TS/SCI security clearance.
10+ years of experience in DevSecOps, Software Engineering, or related engineering disciplines.
Experience with Infrastructure-as-Code tools (e.g., Terraform and/or CloudFormation, Ansible).
Experience with Containerization and Orchestration tools (e.g., Docker and Kubernetes).
Experience with CI/CD tools (e.g., Jenkins, GitLab CI/CD, or Azure DevOps).
Experience with hybrid environments such as VMware and Cloud platforms (e.g., AWS, Azure, or GCP).
Experience implementing security compliance frameworks (e.g., RMF, NIST 800-53, STIGs), and integrating security tools into pipelines (e.g., vulnerability scanning, secrets management).
Proficiency with Python, Bash, and/or PowerShell.
The DevSecOps Engineer III designs, implements, and sustains secure, automated CI/CD pipelines and infrastructure across hybrid on-premises and cloud environments. This role integrates security controls directly into DevOps workflows, enabling continuous compliance, monitoring, and resilient system operations. The engineer partners closely with cybersecurity and infrastructure teams to support secure platform migrations, enforce hardened configurations, and ensure system integrity within classified and mission-critical environments.
The ideal candidate brings strong experience with Infrastructure as Code (IaC), containerized platforms, and CI/CD automation, along with a deep understanding of security frameworks such as RMF, NIST 800-53, and STIGs. An active TS/SCI clearance is required, and experience supporting enclave-based or air-gapped systems is highly valued.
What you'll do:
Design, implement, and maintain secure CI/CD pipelines for deployment of security tools and supporting infrastructure.
Automate infrastructure provisioning using Infrastructure as Code (IaC) across on-prem VMware and cloud environments.
Integrate security controls (SAST, DAST, container scanning, compliance checks) into DevOps workflows.
Support migration of security platforms into a dedicated enclave, ensuring minimal downtime and data integrity.
Collaborate with cybersecurity and infrastructure teams to enforce secure configurations and continuous monitoring.
Implement logging, monitoring, and alerting pipelines for system and application health.
Required Skills/Education:
Active TS/SCI security clearance.
10+ years of experience in DevSecOps, Software Engineering, or related engineering disciplines.
Experience with Infrastructure-as-Code tools (e.g., Terraform and/or CloudFormation, Ansible).
Experience with Containerization and Orchestration tools (e.g., Docker and Kubernetes).
Experience with CI/CD tools (e.g., Jenkins, GitLab CI/CD, or Azure DevOps).
Experience with hybrid environments such as VMware and Cloud platforms (e.g., AWS, Azure, or GCP).
Experience implementing security compliance frameworks (e.g., RMF, NIST 800-53, STIGs), and integrating security tools into pipelines (e.g., vulnerability scanning, secrets management).
Proficiency with Python, Bash, and/or PowerShell.
group id: 10119426