DevSecOps Engineer

Avyanna, LLC; Rockville (MD); On-site; USD 120,000 - 150,000; Full time

Job summary

Avyanna, LLC is seeking a highly skilled DevSecOps Engineer in Rockville, MD to support the integration of security in development processes through CI/CD pipelines and Model-Based Systems Engineering methodologies.

The ideal candidate will have 7–8+ years of experience in a STEM field, ideally with U.S. Army experience, and must possess an active Secret clearance. Responsibilities include collaborating with teams to ensure cybersecurity compliance and maintaining secure software pipelines.

Qualifications

• 7–8+ years of post-graduate experience in a STEM field.
• Strong foundation in systems modeling, automation, and secure software pipelines.
• Prior U.S. Army experience is highly preferred.

Responsibilities

• Design, implement, and maintain secure CI/CD pipelines.
• Integrate security tools into development workflows.
• Collaborate with development teams for DoD cybersecurity compliance.

Skills

DevSecOps practices and tools (Git, Jenkins/GitLab CI, Docker, Kubernetes)

Automation and scripting (Python, Bash, PowerShell)

MBSE tools and SysML modeling

Analytical skills

Communication skills

Education

Bachelor's degree (or higher) in a STEM discipline

Tools

Cameo Systems Modeler (MagicDraw)

IBM Rhapsody

Sparx EA

Job description

We are seeking a highly skilled DevSecOps Engineer with expertise in Model-Based Systems Engineering (MBSE) to support the design, development, integration, and security of complex systems. This role bridges software delivery, cybersecurity, and systems engineering, ensuring secure and efficient system lifecycle management through modern DevSecOps practices and MBSE methodologies.

The ideal candidate will have 7–8+ years of post‑graduate experience in a STEM field, with a strong foundation in systems modeling, automation, secure software pipelines, and defense‑focused environments. Prior U.S. Army experience is highly preferred, especially in operational, engineering, or acquisition roles.

Key Responsibilities

• Design, implement, and maintain secure CI/CD pipelines integrating security controls throughout the software development lifecycle.
• Integrate security tools (SAST, DAST, vulnerability scanning, container security) into development workflows.
• Support cloud and hybrid environments (AWS, Azure, or DoD cloud platforms such as IL2–IL6).
• Collaborate with development and security teams to ensure compliance with DoD cybersecurity frameworks (e.g., RMF, NIST, STIGs).
• Monitor system performance, reliability, and security posture using modern observability tools.
• Develop and maintain system models using MBSE tools such as Cameo Systems Modeler (MagicDraw) (Prferred), IBM Rhapsody, or Sparx EA.
• Apply SysML/UML to define system architecture, requirements, interfaces, and behaviors.
• Support requirements traceability and ensure alignment between system models and implementation artifacts.
• Participate in system lifecycle activities including concept development, design reviews, integration, and validation.
• Collaborate with stakeholders to translate mission needs into technical system models and architectures.

Integration & Cross‑Functional Support

• Bridge software engineering and systems engineering disciplines to enable digital engineering environments.
• Support model integration with DevOps pipelines (e.g., model validation, automated documentation generation).
• Work with program leadership to improve engineering processes, toolchains, and workflows.
• Provide technical leadership and mentorship to junior engineers.

Required Qualifications

• Bachelor's degree (or higher) in a STEM discipline (Engineering, Computer Science, Systems Engineering, Mathematics, etc.).
• 7–8+ years of professional experience post‑graduation.
• Demonstrated experience in:
  • DevSecOps practices and tools (Git, Jenkins/GitLab CI, Docker, Kubernetes)
  • Automation and scripting (Python, Bash, PowerShell)
  • MBSE tools and SysML modeling
• Familiarity with DoD cybersecurity and compliance frameworks (e.g., RMF, NIST 800‑53).
• Experience working in agile or hybrid development environments.
• Strong problem‑solving, analytical, and communication skills.

Preferred Qualifications

• Prior U.S. Army experience (Active Duty, Reserve, or Civilian), particularly in:
  • Systems engineering
  • Cybersecurity
  • Signal, Intelligence, or acquisition programs
• Experience supporting DoD acquisition programs or working in classified environments.
• Relevant certifications such as:
  • Security+, CISSP, or other DoD 8570/8140 certifications
  • Certified MBSE/SysML Professional (OCSMP)
  • AWS/Azure certifications
• Experience with Digital Engineering strategies and tools aligned with DoD initiatives.

Location

Rockville, MD with occasional travel locally (Aberdeen Proving Grounds, Pentagon, CARDEROCK)

Security Clearance

• Active Secret clearance required, Top Secret preferred (or ability to obtain).
• Collaborative, mission‑focused environment supporting defense or national security programs.
• May include hybrid or on‑site support depending on program requirements.