Cloud Engineer / DevSecOps / CI-CD

Halvik; McLean (VA); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401(k) with company matching

Tuition Assistance

Paid holidays and PTO

Job summary

Halvik Corp is seeking a Cloud Engineer / DevSecOps professional to design and maintain secure CI/CD pipelines within USDOT IT security boundaries. You will automate cloud infrastructure (AWS GovCloud/Azure Government), integrate security testing, and coordinate with DOT security operations and governance teams.

The role emphasizes fast, repeatable releases, audit-ready artifacts for ATO, and collaboration with multi-disciplinary teams in a Federal environment.

Qualifications

• Bachelor's degree in CS/IT/CE/Cybersecurity or related field.
• 7+ years professional cloud/DevOps/DevSecOps experience, incl. 3+ years CI/CD in Federal environment.
• Advanced knowledge of CI/CD platforms (GitHub Enterprise/GitHub Actions, Azure DevOps), Git, AWS and/or Azure, IaC (Terraform/CloudFormation/ARM/Bicep).
• Experience with containers/orchestration (Docker/Kubernetes) and scripting (PowerShell/Bash/Python).
• Security scanning (SAST/DAST), vulnerability management, and OWASP Top 10 alignment.
• At least one cloud/DevOps certification (AWS/Azure/CKA). DOT Public Trust clearance preferred.
• Familiarity with FedRAMP, NIST SP 800-53, ATO processes, and secure SDLC practices.

Responsibilities

• Lead secure CI/CD pipeline design, implementation, and improvement using government tools.
• Oversee release orchestration across Dev, QA, UAT/Staging and Production environments.
• Collaborate with developers, architects, QA, DOT teams to ensure security and governance.
• Automate cloud infrastructure (AWS GovCloud/Azure Gov) using IaC and monitor with CloudWatch/Azure Monitor/Splunk.
• Embed security scanning and vulnerability checks into pipelines and maintain ATO artifacts.
• Support testing automation and migration/cutover activities for modernization efforts.
• Maintain asset stewardship within USDOT IT security boundary and ensure least-privilege access.

Skills

CI/CD expertise

Git

Scripting (PowerShell/Python/Bash)

Security awareness

Education

Bachelor's Degree in CS/IT/CE/Cybersecurity

Tools

GitHub Enterprise

Azure DevOps

AWS

Azure

Terraform

CloudFormation

ARM/Bicep

Docker

Kubernetes

PowerShell

Python

Job description

Halvik Corp delivers a wide range of services to 13 executive agencies and 15 independent agencies. Halvik is a highly successful WOB business with more than 50 prime contracts and 500+ professionals delivering Digital Services, Advanced Analytics, Artificial Intelligence/Machine Learning, Cyber Security and Cutting-Edge Technology across the US Government. Be a part of something special!

Position Overview

Halvik is seeking a Cloud Engineer / DevSecOps / CI-CD professional to support the U.S. Department of Transportation (DOT) Office of the Chief Digital & Information Officer (OCDIO) Digital Factory capacity task order. Operating under DOT's IT Modernization Initiative (ITIM-2025-007) and the 2025–2029 "Path to 1DOT IT" strategy, the program delivers modernized, secure, and resilient applications through a Software Factory, Capacity-as-a-Service (CaaS) model. Halvik provides Agile Scrum teams for Development, Modernization, and Enhancement (DME) work across cloud, on-premises, and SaaS platforms hosted within the USDOT IT security boundary.

As a core member of Halvik's DME Scrum teams, this role implements and maintains the secure, automated pipelines that move code from commit to production. The Cloud Engineer / DevSecOps / CI-CD provides cloud infrastructure automation, supports DevSecOps toolchains, and oversees release orchestration across development, QA, staging, and production environments. The position is central to the end-client's objectives: it enables fast, repeatable, and reliable releases, embeds security scanning and automated testing directly into delivery, and produces the audit-ready evidence DOT needs to maintain Authority to Operate (ATO) for modernized systems.

Core Responsibilities

• Strategic Execution: Lead the design, implementation, and continuous improvement of secure CI/CD pipelines using Government-furnished tools such as GitHub Enterprise and Azure DevOps, building reusable pipeline patterns and delivery standards that can be replicated across DOT Operating Administrations.
• Operational Oversight: Manage release orchestration and environment promotion across Development, QA, UAT/Staging, and Production. Maintain deployment scripts, rollback procedures, and data-restore paths, and validate configuration settings, secrets handling, feature flags, and configuration drift before every production release.
• Collaboration: Coordinate with developers, solutions architects, QA and test automation engineers, the Scrum Master, DOT infrastructure teams, the DOT Security Operations Center (SOC), and Federal ISSOs to align sprint work with security requirements, support Digital Factory governance checkpoints (architecture alignment, security posture reviews, release readiness), and resolve environment and deployment issues.
• Technical Performance: Provision and automate cloud infrastructure (e.g., AWS GovCloud, Microsoft Azure Government) using infrastructure-as-code, and configure monitoring and automated alerting (e.g., AWS CloudWatch, Azure Monitor, Splunk) to track performance, error rates, and security events and enable rapid response to outages or anomalies.
• Security Integration: Embed security scanning and policy enforcement into pipelines, including static and dynamic code analysis, dependency and container scanning, and vulnerability checks aligned to the OWASP Top 10, so that no new POA&M-triggering weaknesses reach production.
• Test Automation Enablement: Integrate automated testing into the CI/CD process using Government-furnished tools (currently ClicTest), make test execution results available for sprint demos and release readiness reviews, and support the program's progressive transition from manual to automated testing.
• ATO Evidence and Documentation: Support the Government in preparing and maintaining ATO artifacts, including SSP updates, control implementation evidence, configuration management and scan evidence, and POA&M status inputs. Maintain the Configuration Management Plan, Systems Administration Manual, and IT Contingency Plan inputs.
• Vulnerability and Patch Management: Participate in routine compliance reviews and vulnerability scans, remediate findings in coordination with DOT SOC and ISSOs, and apply OS patches, library upgrades, and platform updates to keep environments secure and current.
• Asset Stewardship: Keep all code, pipelines, and data within the USDOT IT security boundary, and inventory contractor-created digital assets such as Git repositories, CI/CD pipelines, and DevOps workspaces for turnover to the Government.
• Migration and Cutover Support: Automate data migration and cutover activities for legacy modernization efforts, including dry runs, rollback strategies, audit logging, and least-privilege access controls.

Minimum Requirements

• Education: Bachelor's Degree in Computer Science, Information Technology, Computer Engineering, Cybersecurity, or a related field.
• Experience: Minimum of 7 years of professional experience in cloud engineering, DevOps/DevSecOps, or systems engineering, including at least 3 years building and operating CI/CD pipelines for Agile software teams in a Federal Government environment.
• Technical Proficiency: Advanced knowledge of CI/CD platforms (GitHub Enterprise/GitHub Actions, Azure DevOps), Git, AWS and/or Microsoft Azure, infrastructure-as-code (e.g., Terraform, CloudFormation, ARM/Bicep), containers and orchestration (Docker, Kubernetes), scripting (PowerShell, Bash, or Python), and security scanning tools (SAST, DAST, dependency and container scanning).
• Compliance: Must meet U.S. DOT contract requirements, including a favorable Public Trust background investigation and suitability determination. Must follow secure coding and delivery practices aligned with NIST SP 800-218 (Secure Software Development Framework) and the OWASP Top 10.
• Certifications: At least one current cloud or DevOps certification, such as AWS Certified DevOps Engineer or Solutions Architect, Microsoft Certified: Azure DevOps Engineer Expert or Azure Administrator, or Certified Kubernetes Administrator (CKA). CompTIA Security+ or an equivalent security certification is preferred.
• Security Clearance: DOT Public Trust

Preferred Expertise

• Demonstrated success in Federal Contracting, particularly civilian agency IT modernization or Software Factory programs; prior DOT experience is a plus.
• Familiarity with Agile/Scrum team delivery and with FedRAMP-authorized environments such as AWS GovCloud and Azure Government.
• Experience with the NIST Risk Management Framework (NIST SP 800-53), ATO processes, continuous monitoring, and FISMA compliance.
• Experience supporting deployment pipelines for enterprise platforms used at DOT, such as Salesforce, Microsoft Power Platform, ServiceNow, Dynamics 365, Appian, .NET, or Java applications.
• Strong analytical and problem-solving capabilities.

Halvik offers a competitive full benefits package including:

• Company-supported medical, dental, vision, life, STD, and LTD insurance
• Benefits include 11 federal holidays and PTO
• Eligible employees may receive performance-based incentives in recognition of individual and/or team achievements.
• 401(k) with company matching
• Flexible Spending Accounts for commuter, medical, and dependent care expenses
• Tuition Assistance
• Charitable Contribution matching

Privacy Policy – Halvik Corp

Halvik Corp is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.

Halvik'spay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.