DecSecOps Engineer

KBR, Inc; Chantilly, Northern (VA, KY); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

401K plan with company match

Medical, dental, vision

Flexible work schedule

Professional development

Job summary

KBR, Inc. is seeking a DecSecOps Engineer to drive secure software delivery across development, cloud, and hybrid environments.

The role emphasizes integrating security controls, automating CI/CD, and improving platform reliability while aligning with government and commercial missions globally. We value collaboration with security, infrastructure, and development teams, and seek professionals who can implement secure coding practices, containerized deployments, and continuous improvement across

Qualifications

• Bachelor’s degree in CS/IS/Security/Engineering or equivalent experience.
• A minimum of 5+ years in DevOps/DevSecOps/software/platform engineering.
• Experience supporting CI/CD platforms and software delivery processes.
• Experience with cloud-based and containerized environments.
• Collaborates with development, infrastructure, and security teams.
• Must be a U.S. Citizen.

Responsibilities

• Support the implementation and maintenance of secure CI/CD pipelines and automated deployment processes.
• Integrate security controls, vulnerability scanning, and code quality checks into software delivery workflows.
• Configure and support DevSecOps tools and platforms, including source control, CI/CD, testing, and security solutions.
• Collaborate with development teams to identify, troubleshoot, and remediate security and quality issues.
• Assist with repository migrations, pipeline modernization efforts, and DevSecOps platform enhancements.
• Support containerized application deployments and platform engineering activities within cloud and hybrid environments.
• Develop and maintain automation scripts, reusable pipeline templates, and deployment standards.
• Monitor DevSecOps tooling, support upgrades and maintenance activities, and help ensure platform reliability and performance.
• Participate in Agile development activities and collaborate with cross-functional teams to support application delivery objectives.
• Promote secure coding practices and contribute to continuous improvement initiatives that enhance DevSecOps maturity and operational efficiency.

Job description

Title: DecSecOps Engineer

The DevSecOps Engineer is responsible for integrating security practices into the software development lifecycle to support secure, scalable, and reliable application delivery. This role works closely with development, infrastructure, and cybersecurity teams to implement CI/CD automation, application security controls, code quality standards, and cloud-based solutions. The successful candidate will contribute to the ongoing evolution of the organization's DevSecOps capabilities while supporting platform modernization and continuous improvement initiatives. Trinzic is being established as an independent public company through the planned separation of KBR's Mission Technology Solutions business, which is expected to be completed on January 4, 2027. This role offers a rare opportunity to join the organization during a pivotal period of growth and transformation, helping build and support secure software delivery platforms, cloud engineering capabilities, and DevSecOps practices that will position the company for long-term success while serving critical government and commercial missions around the world.

Key Responsibilities

• Support the implementation and maintenance of secure CI/CD pipelines and automated deployment processes.
• Integrate security controls, vulnerability scanning, and code quality checks into software delivery workflows.
• Configure and support DevSecOps tools and platforms, including source control, CI/CD, testing, and security solutions.
• Collaborate with development teams to identify, troubleshoot, and remediate security and quality issues.
• Assist with repository migrations, pipeline modernization efforts, and DevSecOps platform enhancements.
• Support containerized application deployments and platform engineering activities within cloud and hybrid environments.
• Develop and maintain automation scripts, reusable pipeline templates, and deployment standards.
• Monitor DevSecOps tooling, support upgrades and maintenance activities, and help ensure platform reliability and performance.
• Participate in Agile development activities and collaborate with cross-functional teams to support application delivery objectives.
• Promote secure coding practices and contribute to continuous improvement initiatives that enhance DevSecOps maturity and operational efficiency.

Basic Qualifications

• Education & Experience Bachelor's degree in Computer Science, Information Systems, Information Security, Engineering, or a related field; equivalent experience may be considered.
• Five (5) or more years of experience in DevOps, DevSecOps, software engineering, platform engineering, or related technical disciplines.
• Experience supporting CI/CD platforms and software delivery processes.
• Experience working with cloud-based and containerized environments.
• Experience collaborating with development, infrastructure, and security teams.
• Must be a U.S. Citizen.

Technical & Leadership Skills

• Experience with CI/CD platforms such as Azure DevOps, GitHub, GitLab, or similar technologies.
• Knowledge of application security principles, secure coding practices, and vulnerability management concepts.
• Experience supporting automated deployments, source code management, and software delivery pipelines.
• Familiarity with code quality, security scanning, and software composition analysis tools.
• Experience with container technologies such as OpenShift, Kubernetes, or similar platforms.
• Exposure to cloud environments, preferably Microsoft Azure.
• Proficiency with scripting or automation languages such as PowerShell, Python, Bash, or similar technologies.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent communication and collaboration skills with both technical and non-technical stakeholders.

Preferred Qualifications

• Experience with DevSecOps tools such as SonarQube, Fortify, Sonatype, Katalon, or similar platforms.
• Experience supporting repository migrations or CI/CD pipeline modernization efforts.
• Familiarity with GitHub Advanced Security or comparable security solutions.
• Knowledge of policy-as-code frameworks and infrastructure automation concepts.
• Security, cloud, or DevOps-related certifications.
• Experience supporting government, defense, engineering, or other highly regulated environments.

Additional Compensation

KBR may offer bonuses, commissions, or other forms of compensation to certain job titles or levels, per internal policy or contractual designation. Additional compensation may be in the form of sign on bonus, relocation benefits, short term incentives, long term incentives, or discretionary payments for exceptional performance.

Benefits

• KBR offers a selection of competitive lifestyle benefits which could include a 401K plan with company match, medical, dental, vision, life insurance, AD&D, flexible spending account, disability, paid time off, or flexible work schedule.
• We support career advancement through professional training and development.

Belong, Connect and Grow at KBR

At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team's philosophy and fosters an environment where everyone can Belong, Connect and Grow.

We Deliver – Together.

KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.

KBR - Delivering Solutions, Changing the World.

KBR brings together the best and brightest to deliver science, technology and engineering solutions that help governments and companies around the world accomplish their most critical missions and objectives. In everything we do, we are guided by our ONE KBR Values: We Value Our People – We create diverse, inclusive environments in which each person can feel safe, respected and valued, and where everyone has opportunities to grow and reach their full potential. We Deliver – We are uncompromising in our commitment to deliver innovative, high-quality, technology-led solutions for our customers and exceptional, sustainable value for all our stakeholders. We Are People of Integrity – We value honesty, trust, courage, fairness, prudence and tenacity. We believe doing what’s right for the planet, the communities where we work, and our people is good for business.

We Empower – We empower our people with a shared purpose, the right tools and the supportive culture they need to be proactive decision-makers, to be adaptive to change, and to succeed. We Are a Team of Teams – We have a will to succeed, but we value the achievements of our team of teams over individual accomplishments. Our collective focus makes us a better, stronger, more effective company. We have also embedded environmental, social and governance (ESG) principles in every business operation and corporate function. Not only are we committed to operating safely, sustainably and equitably, but we are also committed to using our capabilities and expertise to help our customers accomplish their sustainability goals.

Worldwide, KBR employs a diverse workforce approximately 29,000 people strong, with customers in more than 80 countries and operations in 40 countries. At KBR, We Deliver.

Fraud Alert

Fraud has infiltrated the job placement market via the internet, email and direct phone contact. Attempts have included unauthorized use of KBR's name and logo to solicit potential job seekers or to extend false job offers. Bad actors may mix in fake job advertisements with legitimate postings. These ads can include contact instructions and require job seekers to send sensitive personal information or money to pay for visa applications, processing fees, etc., in exchange for consideration for a high-paying position. KBR will never ask for any sort of advance payment as part of the recruiting/hiring process. Candidate profiles are carefully managed to protect personal information.