DevSecOps Engineer

Contract Professionals, Inc.; Fayetteville (NC); On-site; USD 120,000 - 180,000; Full time

Job summary

Contract Professionals, Inc. is seeking an experienced DevSecOps Engineer to engineer, secure, and sustain containerized platforms and automation pipelines for a Kubernetes-based PaaS.

This role operates in on-premise, air-gapped environments and combines DevOps with hands-on cybersecurity. You will build and maintain CI/CD pipelines, manage Rancher-hosted Kubernetes, implement infrastructure as code with Terraform and Ansible, and ensure security controls across isolated networks.

Qualifications

• 9+ years of experience in DevOps or related field.
• Hands-on experience administering on-prem GitLab and offline registries.
• Rancher and Kubernetes cluster administration expertise.
• Experience with Terraform and Ansible for IaC.
• Strong DevOps cybersecurity practices and risk management.
• Proficient in secure Python programming for automation.
• Experience with Git/GitHub, CI/CD pipelines.
• Strong Linux system administration, Debian-based preferred.
• Understanding of networking fundamentals.
• Experience in air-gapped/isolated networks.
• API design, development, and integration in automated workflows.

Responsibilities

• Engineer containerized apps, CI/CD pipelines, and monitoring.
• Develop and maintain IaC using Terraform and Ansible.
• Administer Kubernetes clusters via Rancher.
• Manage on-prem GitLab and offline registries.
• Integrate software into air-gapped environments with minimal disruption.
• Integrate APIs into automated workflows.
• Implement security controls to protect systems and data.
• Establish testing/evaluation processes for cyberspace systems.
• Troubleshoot complex on-premise issues and optimize components.
• Develop secure automation and scripting in Python.
• Stay current with DevOps, cybersecurity, and IaC best practices.

Skills

DevOps engineering

Systems engineering

GitLab administration

Rancher / Kubernetes

Terraform

Ansible

CI/CD pipelines

Python scripting

Cybersecurity practices

Git / GitHub

Linux administration

Networking fundamentals

Air-gapped networks

API integration

Education

High school diploma or equivalent

Tools

Terraform

Ansible

Rancher

Kubernetes

GitLab

GitHub

Python

Job description

Security Clearance: Active TS/SCI Required

Position Overview

We are seeking an experienced DevSecOps Engineer to engineer, secure, and sustain containerized platforms and automation pipelines supporting a Kubernetes-based Platform as a Service (PaaS) architecture.

This position operates within on-premise and air-gapped environments and combines DevOps engineering with hands-on cybersecurity implementation. The DevSecOps Engineer will build and maintain CI/CD pipelines, administer Kubernetes clusters through Rancher, manage infrastructure as code, and integrate software and hardware into isolated network environments while maintaining system security, reliability, and performance.

Key Responsibilities

• Engineer and orchestrate containerized applications, CI/CD pipelines, and monitoring solutions supporting full-stack automation.
• Develop and maintain infrastructure-as-code solutions using Terraform and Ansible.
• Administer Kubernetes clusters through Rancher and support containerized application environments.
• Manage on-premise GitLab environments and offline container registries.
• Integrate newly acquired software and hardware into existing environments while minimizing operational disruption.
• Integrate applications and software into air-gapped and isolated network environments.
• Assess software and hardware platforms and recommend appropriate cybersecurity improvements.
• Implement and maintain security controls designed to protect systems and data.
• Establish and execute testing and evaluation processes for cyberspace systems.
• Troubleshoot and resolve complex technical issues affecting on-premise systems.Configure, update, and manage system components to improve existing solutions.
• Develop secure automation and scripting solutions using Python.
• Design, build, and integrate APIs into automated workflows.
• Apply current DevOps, cybersecurity, infrastructure-as-code, and automated software quality assurance best practices.
• Stay current with relevant technologies, industry standards, and cybersecurity practices.

Required Qualifications

• 9+ years of demonstrated experience in DevOps engineering, systems engineering, or a related technical field.
• Hands-on experience administering on-premise GitLab and managing offline container registries.
• Hands-on experience with Rancher and Kubernetes (K8s) cluster administration.
• Experience developing and managing infrastructure as code using Terraform and Ansible.
• Strong understanding of DevOps cybersecurity practices, risk management, and operational security.
• Proficiency in secure Python programming for automation and scripting.
• Experience with Git/GitHub, automated builds, and CI/CD pipelines.
• Strong Linux system administration experience; Debian-based Linux experience is strongly preferred.
• Understanding of networking fundamentals.
• Experience integrating applications and software within air-gapped or otherwise isolated networks.
• Understanding of API design, development, and integration within automated workflows.
• Ability to troubleshoot complex systems in on-premise environments.

Preferred Qualifications

The following certifications and experience are preferred but not required:

• Experience supporting U.S. Special Operations organizations.
• CISSP or CompTIA SecurityX.
• Certified Kubernetes Security Specialist (CKS).
• HashiCorp Certified: Terraform Associate.

Education

• High school diploma or equivalent required.
• Minimum of 9 years of relevant professional experience.

Required Certification

Candidates must possess a DoD 8570 IAT Level II / DoD 8140-compliant certification, such as CompTIA Security+ or higher, at the time of start.

An Active TS/SCI Security Clearance Is Required.

Candidates who do not currently possess an active TS/SCI clearance will not meet the security requirements for this position.

NO SUBCONTRACT REQUIREMENT:

No third-party applicants will be considered. If you are a third-party contracting company, please do not respond to this position.