DevSecOps Engineer - DoD RMF & CI/CD Specialist

KaiHonua; Denver (CO); On-site; USD 145,000 - 150,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Disability insurance

Life insurance

Flexible Spending Accounts

401(k)

PTO

Paid parental leave

Tuition reimbursement

Paid federal holidays

Security clearance

Job summary

Galapagos Federal Systems, LLC seeks a DevSecOps Engineer to integrate development, security, and operations for a DoD system serving thousands of users. You will design secure CI/CD pipelines, automate tests, and ensure compliance with RMF, STIG, and OWASP standards.

The role requires DoD-adapted cloud experience (AWS GovCloud) and strong automation skills within Agile teams. U.S. citizenship and Security+ are required. Expect to work in a high-security, mission-critical environment.

Qualifications

• DoD background investigation requirements; Tier 3/Tier 5 access as applicable.
• Experience supporting DMDC or DHRA systems.
• Experience designing and managing CI/CD pipelines and DevSecOps automation frameworks.
• Experience working within AWS GovCloud or other DoD-authorized cloud environments.
• Strong technical experience with Oracle databases, SQL, Apache, and Tomcat environments.
• Experience with DevSecOps and security tools such as Jenkins, Fortify, Sonatype, and JIRA.
• Knowledge of RMF processes and eMASS.
• Experience implementing NIST SP 800-53 security controls and DISA STIG requirements.
• Familiarity with Agile/Scrum development methodologies.
• Strong understanding of secure coding practices and OWASP security standards.
• Experience with MicroStrategy reporting platforms.

Responsibilities

• Design, implement, and maintain DevSecOps CI/CD pipelines that support secure, automated software delivery
• Automate functional testing and integrate automated test cases into the DevSecOps pipeline prior to deployment authorization
• Ensure system deliverables are architected to fully leverage CI/CD capabilities
• Support quarterly Agile sprint cycles, delivering bug fixes and priority updates
• Apply ASD STIG requirements to software architecture, development, and deployment processes
• Implement secure coding best practices, including OWASP standards
• Conduct application security scans using Fortify and Sonatype and remediate vulnerabilities
• Support migration and deployment of applications to CSPs in alignment with DoD SRG
• Operate and maintain IL4/IL5 cloud environments for CUI data
• Collaborate with teams to ensure systems remain secure and compliant

Skills

CI/CD pipelines

DevSecOps automation

AWS GovCloud

RMF / NIST SP 800-53

DISA STIG

OWASP

Jenkins

Fortify

Education

U.S. Citizenship

CompTIA Security+ CE (DoW 8140/8570 compliant)

Bachelor's degree in Engineering, CS, IT, Systems Engineering or related discipline

Tools

JIRA

Fortify

Sonatype

Jenkins

AWS GovCloud

Oracle

Tomcat

Apache

Job description

Galapagos Federal Systems, LLC seeks a DevSecOps Engineer to integrate development, security, and operations for a DoD system serving thousands of users. You will design secure CI/CD pipelines, automate tests, and ensure compliance with RMF, STIG, and OWASP standards.

The role requires DoD-adapted cloud experience (AWS GovCloud) and strong automation skills within Agile teams. U.S. citizenship and Security+ are required. Expect to work in a high-security, mission-critical environment.