DevSecOps Engineer

Sev1Tech; San Diego (CA); On-site; USD 100,000 - 130,000; Full time

Job summary

Sev1Tech is seeking a DevSecOps Engineer to support the Rapid Response and Integration project with the US Marine Corps. The role involves designing and implementing secure DevSecOps infrastructure, ensuring compliance, and collaborating with cybersecurity teams. Candidates must hold a relevant degree and possess experience in federal contracting environments.

Qualifications

• Must have US citizenship and ability to obtain security clearance.
• Experienced in developing and maintaining containerized applications.
• Familiar with Agile/Scrum methodologies.

Responsibilities

• Design and implement DevSecOps infrastructure with CI/CD pipelines.
• Collaborate with cybersecurity for security controls and assessments.
• Support updates to software development processes and documentation.

Skills

Proficiency with CI/CD pipelines

Containerization technologies

Security scanning tools

Scripting and automation skills

Education

B.S. in Computer Science, Math, or similar

Tools

Jenkins

GitLab

Docker

Kubernetes

Terraform

Ansible

SonarQube

Fortify

Job description

Overview/ Job Responsibilities

Sev1Tech is looking for a DevSecOps Engineer to support the Rapid Response and Integration (R2I) project with expertise in technologies and capabilities in the areas of design, integration, test and evaluation, deployment, cybersecurity, and maintenance of new software applications for the United States Marine Corps (USMC).

The DevSecOps Engineer will have the ability to deploy a DevSecOps platform with accredited and secured hardened containers built from the DoD Centralized Artifacts Repository to support the DoD’s ability to field operational capabilities faster.

This position requires onsite presence at the customer location (NIWC PAC San Diego) two-three days per week.

• Design, develop, and implement a scalable and secure DevSecOps infrastructure, including CI/CD pipelines, version control systems, and automated testing frameworks.
• Implement automated deployment and configuration management processes and containerization technologies (e.g., Docker, Kubernetes).
• Develop and enforce best practices and standards for code quality, application security, and performance optimization, ensuring adherence to federal guidelines and compliance requirements.
• Collaborate with cybersecurity personnel to identify and implement appropriate security controls, automated security scans, and vulnerability assessments throughout the software development lifecycle.
• Support development of new code, updates, including security updates, and fixes to software applications following the SCRUM software development process.
• Update software development processes and procedures where necessary
• Support updates to documentation for software applications. Documentation will include but is not limited to Software Design Description (SDD), System Administrators Manual (SAM), User Quick Reference Guide (UQRG), Admin Quick Reference Guide (AQRG), Software Version Description (SVD), Software Test plans, Software Test procedures, and Software Test Reports.
• Support updates to unit and integration tests and pipelines corresponding to software updates
• Assist in establishing, developing, and maintaining the platform and infrastructure environment necessary to host the application for development, test, and stage.

Minimum Qualifications

• B.S. in Computer Science, Math, or similar degree
• Proven experience as a DevOps Engineer, Automation Engineer, or similar role, preferably in a federal or government contracting environment.
• Strong proficiency with relevant DevSecOps tools and technologies, such as CI/CD pipelines (e.g., Jenkins, GitLab), version control systems (e.g., Git), configuration management tools (e.g., Terraform, Ansible), and containerization platforms (e.g., Docker, Kubernetes, OpenShift).
• Experienced in developing, testing, and maintaining containerized applications
• Solid knowledge of security scanning tools (e.g., SonarQube, Fortify, OWASP Dependency Check) and vulnerability assessment practices.
• Strong scripting and automation skills (e.g., Bash, Python, PowerShell) to streamline and automate manual tasks and processes.
• Familiarity with Agile/Scrum development methodologies and experience working within an Agile team.
• Excellent communication and collaboration skills, with the ability to effectively interface with technical and non-technical stakeholders.
• Strong "security first" mindset
• US citizenship and the ability to obtain and maintain government security clearance is required.

About Sev1Tech LLC

Welcome to Sev1Tech! Founded in 2010, we are proud to be a leading provider of IT modernization, engineering, and program management solutions. Our commitment is to deliver exceptional program and IT support services that empower critical missions for both Federal and Commercial clients.

At Sev1Tech, our mission is clear: Build better companies. Enable better government. Protect our nation. Build better humans across the country. We believe that through innovation and dedication, we can make a significant impact on the communities we serve.

Join the Sev1Tech family, where your potential for greatness is limitless! Here, you will not only achieve remarkable accomplishments but also enjoy a fulfilling and rewarding career progression. We invite you to explore opportunities with us and become part of a team that values your contributions and growth.

Ready to take the next step? Apply directly through our website: Sev1Tech Careers and use the hashtag #joinSev1Tech to connect with us on social media!

For any additional questions or to submit referrals, feel free to reach out [e-mail].