DevSecOps Engineer

ecsfederal; Pennsylvania; On-site; USD 120,000 - 180,000; Full time

Job summary

Everforth ECS seeks a DevSecOps Engineer to support a long-term contract in Mechanicsburg, PA, focusing on IaC, CaC, container deployments, and CI/CD pipelines. The role involves security testing, vulnerability management, and mentoring the government workforce in DevSecOps practices, while aligning with SAFe principles.

You will work on secure computing architectures, DoD cloud platforms, and continuous process improvement.

Qualifications

• Bachelor’s degree in a related field.
• ,

Responsibilities

• Support deployment of IaC, CaC, container deployments and CI/CD pipelines.
• Mentor and train in DevSecOps practices within a government environment.
• Implement automated security testing and vulnerability scanning.
• Maintain zero-trust architectures, identity management and encryption solutions.
• Work with DoD cloud platforms (AWS GovCloud, Azure Government) and hybrid environments.
• Ensure secure software development practices and vulnerability management.
• Collaborate with delivery teams to improve processes and reduce maintenance.
• Provide SAFe-aligned workflow participation and Cloud services management.
• Maintain high availability and performance of secure computing environments.

Skills

Customer communication

Written communication

Attention to detail

Plain language communication

Mentoring

SAFe principles

Cloud services

Security best practices

Linux/Unix

Container tech

Education

Bachelor’s degree in a related field

IAT-2 qualification

AWS DevOps certification or equivalent

Secret Clearance, Top Secret preferred

5+ years experience in CI/CD

Government cloud platforms experience

Tools

Jenkins

GitLab

CI/CD tools

Terraform

CloudFormation

Ansible

Chef

Puppet

SonarQube

OWASP ZAP

AWS GovCloud

Azure Government

Docker

Kubernetes

Job description

Everforth ECS is hiring a DevSecOps Engineer to work in our Mechanicsburg, PA office.

Everforth ECS is hiring a DevSecOps engineer to support a long-term contract in Mechanicsburg, PA. The selected DevSecOps engineer will provide support and mentorship in the development and deployment of Infrastructure as Code (IaC), Configuration as Code (CaC), container-based deployments, and creating Continuous Integration / Continuous Deployment (CI/CD) pipelines.

Essential Job Functions:

• Work on systems administration related issues for software in different network environments
• Support deployment of custom software solutions integrating COTS, GOTS, and developed software
• Propose system administration process improvement to reduce overall maintenance requirements by working with the delivery teams on process requirements
• Determine systems requirements, input/output processes, and working parameters for software compatibility and maintenance of system configuration
• Identify, analyze, and resolve program support deficiencies. Develop and recommend corrective actions.
• Analysis and support services related to securing, ensuring high performance of and maintaining a secure computing architecture
• Mentoring and knowledge transfer including educating the government workforce and supporting DevSecOps accreditation efforts
• Provide participation in Scaled Agile Framework (SAFe) principles in the development of workflows, task accomplishment and implementation/management of Cloud services
• Promote an environment of continuous process improvement, learning and team collaboration

Necessary Skills and Knowledge:

• Excellent customer service, organizational, and writing skills
• Ability to communicate at Officer/Senior Enlisted/GS level in a military support environment
• Ability to use plain language to communicate complex concepts to all levels of the organization
• Excellent written and verbal communication skills
• Attention to detail
  • Bachelor’s degree in a related field
  • Information Assurance Technical II (IAT-2) qualification
  • AWS DevOps certification or equivalent
  • Secret Clearance, Top Secret preferred
  • Minimum 5+ years of experience in the following areas:
    • Expertise with hands-on experience with CI/CD platforms (Jenkins, GitLab, CI/CD, etc.)
    • Expertise with hands-on experience with IaC tools (Terraform, CloudFormation, etc.)
    • Expertise with hands-on experience with CaC tools (Ansible, Chef, Puppet, etc.)
    • Expertise and proficiency in implementing automated security testing and vulnerability scanning tools (SonarQube, OWASP ZAP, etc.)
    • Proficiency in integrating with DoD cloud platforms (AWS GovCloud, Azure Government, or hybrid environments)
    • Experience with FedRAMP, FISMA, DoD CC SRG, or other government cloud compliance requirements
    • Strong understanding of secure software development practices, vulnerability management, and incident report
    • Experience maintaining zero-trust architectures, identity management, and encryption solutions
    • In-depth knowledge of Linux-Unix systems and container technologies (Docker, Kubernetes, etc.)