DevSecOps

Zapata Technology; Sterling (VA); On-site; USD 110,000 - 160,000; Full time

Job summary

Zapata Technology is seeking a DevSecOps Engineer to work with a skilled IT team to move prototypes through UAT into an air-gapped customer enclave. You will perform integration tasks, gather requirements, script, test, and document, while engaging with customer requirements sessions and tracking issues from feedback.

You will design, develop, and maintain tools for document ingestion, classification, indexing with security controls, and ensure scalable deployments using Helm/Kubernetes.

Qualifications

• Experience with containerization and orchestration: Docker, Podman, Kubernetes.
• Experience delivering software into air-gapped environments.
• Proficiency in TypeScript/JavaScript (Node.js) and Java (Maven).

Responsibilities

• Integrate software: analyze requirements, script, test, document and track changes.
• Engage with customer sessions, UAT, and convert feedback into tracked issues and fixes.
• Develop tools for document ingestion, conversion, indexing with access control and end-to-end validation.
• Design and deploy scalable DevSecOps solutions, artifacts, and documentation across networks.

Skills

Docker

Podman

Kubernetes

TypeScript/JavaScript

Java

Shell scripting

OpenSearch/Elasticsearch

Linux admin

Communication

Time management

Collaboration

Education

Bachelor's degree in related field

4 years experience substituted

Tools

Confluence Data Center plugins

MediaWiki

Docling/Tesseract

PKI/mTLS

Keycloak/OAuth2 proxies

Python/PowerShell

Job description

Summary:

The DevSecOps Engineer is part of a skilled IT team that will work independently and collectively with other engineers to identify and test potential enhancements and resolve technical issues with taking prototypes through User Acceptance Testing (UAT) into an air-gapped customer enclave.

Essential Functions:

Perform software integration tasks, including systems analysis, requirements gathering, scripting, testing, and documentation. Engage directly with customer requirements sessions, and user acceptance testing, and turn their feedback into tracked issues and delivered fixes. Use source code control to track and safeguard changes and apply software updates.Design, develop, and maintain tools that conduct document ingestion, normalize and segment their structure, extract classification markings, score similarity, and index results into a search engine with document-level access control. Devise solutions with minimal prior documentation.Develop and maintain tools that provide content conversion, user and group mapping, and permission-preserving migration. Validate migrations end to end and at scale.Perform infrastructure management, including designing and implementing scalable deployments across multiple networks using DevSecOps practices. Package and deploy applications with Helm and Kubernetes, and deliver the same applications as container images for a Podman air-gap delivery path: offline dependency closures, hardened base images, SBOMs, image signing, and CVE remediation. Document infrastructure creation, management, and decommissioning procedures.Uphold the security posture of tools that handle classified data, fail-closed access control, mTLS and PKI-based identity, tamper-evident audit logging, and test suites.Additional duties as assigned.

Job Qualifications:

Required Qualifications and Skills include:

• Knowledge of containerization and container orchestration, including networking, using Docker, Podman, and Kubernetes.
• Experience delivering software into air-gapped or disconnected environments.
• Proficiency in TypeScript or JavaScript on Node.js and in Java with Maven.
• Comfort with Shell scripting.
• Experience with document parsing and data conversion: DOCX, XLSX, PDF, XML, JSON, and regular expressions, including repairing malformed input.
• Experience with a search engine such as OpenSearch or Elasticsearch, including index provisioning and role-based or document-level security.
• Linux system administration knowledge: command line, service management, and software configuration within virtual machine constraints.
• Excellent verbal and written communication skills.
• Professional manner and a strong ethical code.
• Exceptional time management and ability to multitask.
• Collaborate across the organization on a variety of company contracts/projects, bringing your skills to new challenges and opportunities

Preferred Qualifications and Skills include:

• Experience developing Atlassian Confluence Data Center plugins (P2/OSGi, Spring, Atlassian SDK), including support for multiple Confluence versions.
• Experience administering or extending MediaWiki: configuration, PHP extensions, and skin theming.
• Experience with classification marking standards and handling of classified or controlled documents.
• Experience with OCR and document layout analysis tools such as Docling or Tesseract, and with evaluating them for constrained environments.
• Experience with PKI, mTLS, step-ca, Keycloak, or OAuth2 proxies for per-user identity in Kubernetes.
• Experience profiling and tuning applications at scale (hundreds of thousands of documents, thousands of wiki spaces).
• Familiarity with Python and PowerShell.

Education/Experience include:

• A bachelor’s degree with 6 years of experience in performing similar or related work is required.
• Four years of experience may be substituted for a bachelor’s degree.
• Two years' experience may be substituted for a degree.

Working Conditions:

Must be able to work 9-5 PM EST Monday-Friday as these are the customer’s core support hours.Possible prolonged periods of stationary work.

Position Type/Expected Hours of Work:

Full-time position

Travel:

Less than 5%

Clearance:

Top Secret SCI clearance required for this role.

Equal Opportunity Employer – Disabled/Veteran

Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Zapata Technology, Inc.providesreasonable accommodation to applicants who are veterans or who have disabilities and are unable to fully use our company application system. If you need a reasonable accommodation for any part of the application and hiring process, pleasenotify Christina Hall, EEO Coordinator at [e-mail]

PI287821948