DevSecOps Engineer

Integrated Solutions for Systems, Inc.

Aberdeen (MD)

On-site

USD 110,000 - 140,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Competitive salary

Employee ownership

Comprehensive health benefits

401(k) retirement plan

Tuition Assistance & training

Job summary

Integrated Solutions for Systems (IS4S) is seeking a DevSecOps Engineer to join an Aberdeen, MD team supporting DoD programs. You will help architect, develop, integrate, test, and deploy secure solutions for C2, Fires, and EW systems within a multidisciplinary group.

Expect autonomy, learning, and task ownership while collaborating with customers and partners. The role requires DoD-related security awareness, containerization skills, and experience with GitLab, AWS/Azure, and CI/CD pipelines.

Qualifications

Bachelor’s degree or higher in engineering, CS, or related technical field.
Pursuing degree in engineering or CS at least part-time.
Experience in DevSecOps with GitLab, AWS, Azure.
Experience deploying and automating software releases.
Familiarity with SAST, DAST, SCA, DCA and vulnerability handling.
Understanding CVEs, mitigations, and false positives.
Containerization and deployment with Docker, Kubernetes, Rancher, Helm.
Programming/scripting in C++, Go, Bash, Java, Javascript; Unix administration.
Ability to work independently and travel for customer engagements.

Responsibilities

Assisting with architecture, design, development, integration, testing, and deployment.
Creating pipelines to automate testing and deployment.
Maintaining cybersecurity posture with modern development tools.
Identifying vulnerabilities and planning actions, POAM as needed.
Integrating security and compliance, including encryption and access management.
Adhering to STIGs and DoD security requirements.
Developing cybersecurity artifacts and system diagrams.
Communicating with customers, stakeholders, and other companies.

Skills

DevSecOps

GitLab

AWS

Azure

SAST

DAST

SCA

DCA

Docker

Kubernetes

Bash/Java/Go

Education

Bachelor’s degree or higher in engineering or CS

Pursuing degree in related field (part-time)

Tools

GitLab

AWS

Azure

Docker

Kubernetes

Rancher

Helm

Job description

Job Title: DevSecOps Engineer

Company Overview: Integrated Solutions for Systems (IS4S) is a fast-growing small business at the forefront of developing innovative solutions for the warfighter. We use applied research and development combined with novel systems integration to enhance capabilities of our armed forces.

Position

DevSecOps Engineer

Location

Auburn, AL; Aberdeen, MD

Job Type

Full-time

Job Description

IS4S is seeking a DevSecOps Engineer in Auburn, AL to assist development enabling Command and Control (C2), Fires, and Electromagnetic Warfare (EW) technologies for the DoD. The person or persons filling this position will integrate into an existing, multi-disciplinary team to create, develop, integrate, and deploy solutions used by warfighters. The challenges facing our nation are constantly evolving. Therefore, we are looking for self-driven, entrepreneurial team members willing and able to constantly learn, adapt, and find ways to develop and integrate solutions. Selected applicants will be expected to gain familiarity with the underlying domain (e.g., EW, Fires) and its role in the larger system of systems to incorporate warfighter needs throughout the solution. They will be given freedom to solve problems and develop solutions with the expectation of owning their tasks and responsibilities. They will also integrate into an existing team that provides support and to ensure designs and solutions conform to and enhance the end product.

Responsibilities

Assisting with architecture, design, development, integration, testing, and deployment
Creating pipelines to automate testing and deployment
Maintaining a strong cybersecurity posture while incorporating modern development tools and practices
Identifying vulnerabilities, real or perceived, adjudicating them, and either explaining false positives or developing a Plan of Action and Milestones (POAM)
Integrating security and compliance into products, including encryption, access management, and system logging
Adhering solutions to DoD Security Technical Implementation Guides (STIGs)
Develop and maintain cybersecurity artifacts (scan results, POAMs, SBOMs, system diagrams, etc.)
Communicating and interacting with customers, stakeholders, and other companies

Required Abilities, Experience, and Skills

Bachelor’s degree or higher in engineering, computer science, or related technical field (for full-time applicants)
In pursuit of a Bachelor’s degree or higher in engineering, computer science, or related technical field (for part-time applicants)
Experience developing, testing, and delivering applications within a DevSecOps framework including proficiency with common platforms and environments such as GitLab, AWS, Azure, etc.
Experience with software deployment processes, including packaging, configuration, and release to production or test environments
Experience with SAST, DAST, SCA, and DCA
Ability to understand CVEs, develop and implement mitigations, and communicate false positives
Understanding of containerization and containerized deployment (e.g., Docker, Rancher, Kubernetes, etc.)
Experience with programming and scripting languages (e.g., C++, Go, Bash, Java, Javascript)
Understanding of Unix system administration
Ability to work independently, take initiative, and manage tasks with minimal direction
Must be able to travel to support customer engagements, integration and testing in live environments, occasionally working non-standard hours to match exercise schedules
Must be able to lift and carry computing and networking equipment in support of transit and installation
Possess strong written and verbal communication skills
US Citizenship is required

Desired Experience and Skills

In-depth knowledge of NIST 800, CMMC, DoD DISA IL-4/5/6
Knowledge of authentication and authorization protocols (e.g., SAML, OAuth, OIDC) and access control methods (PKI, MFA, ABAC)
Understanding of the operational requirements for systems functioning in DIL/Tactical Edge environments
In-depth knowledge of containerized deployment using Kubernetes and Helm
Familiarity Apollo and Rubix
Exposure to distributed systems, microservices architectures, or high-availability systems
Experience with Mission Command or C2 systems, especially those dealing with Fires and Electromagnetic Warfare

Benefits Summary