DevSecOps Engineer II - Entarian

OpenTalent; Washington; On-site; USD 120,000 - 180,000; Full time

Job summary

Entarian is seeking a Software Developer with strong DevSecOps expertise to design, integrate, test, and deploy secure software across enterprise environments in an Agile/CI/CD setting.

You will build and secure pipelines with Docker and Kubernetes, implement IaC (Terraform, CloudFormation, Ansible), perform security hardening, and partner with cybersecurity teams to meet federal standards and regulatory requirements.

Responsibilities

• Design, develop, secure, and optimize CI/CD pipelines across environments.
• Analyze, remediate, and verify STIG findings to ensure compliance with federal standards.
• Architect scalable DevSecOps infrastructure with version control, automated tests, and monitoring.
• Build/maintain automated deployment workflows using Docker and Kubernetes.
• Develop and enforce best practices for code quality, secure coding, dependencies, performance, and compliance.
• Partner with cybersecurity to embed continuous security controls in the pipeline.
• Enhance software development processes to align with mission needs and federal security mandates.
• Support unit and integration tests, keeping test suites aligned with updates.
• Help establish app platform environments across development, test, staging, and pre-production.
• Create OCI-compliant container images for Kubernetes with DoD/DHS hardening.
• Develop IaC to provision scalable, secure cloud environments.
• Support deployment of microservices to Kubernetes with resiliency and policy-based traffic management.

Skills

DevSecOps

CI/CD

Security mindset

Agile

Tools

Docker

Kubernetes

Terraform

CloudFormation

Ansible

Git

Job description

Entarian is seeking a highly skilled Software Developer with deep DevSecOps expertise to support the design, integration, testing, deployment, cybersecurity, and sustainment of modern software applications across secure enterprise environments. The ideal candidate brings strong engineering discipline, a security‑first mindset, and experience operating within Agile and CI/CD‑driven ecosystems.

Core Responsibilities

• Design, develop, secure, and optimize CI/CD pipelines using industry‑leading orchestrator tools to enable automated builds, testing, security scanning, and deployments across multiple environments.
• Analyze, remediate, and verify Security Technical Implementation Guide (STIG) findings, working hands‑on with system stakeholders to ensure compliance, security hardening, and alignment with federal cybersecurity standards.
• Architect and implement scalable, reliable, and secure DevSecOps infrastructure, including version control systems, automated testing frameworks, and continuous monitoring solutions to support end‑to‑end delivery.
• Build and maintain automated deployment and configuration management workflows, leveraging containerization technologies (e.g., Docker, Kubernetes) to ensure consistent, repeatable, and secure deployments.
• Develop, document, and enforce engineering best practices for code quality, secure coding, dependency management, application performance, and compliance with federal regulatory and security requirements.
• Partner closely with cybersecurity teams to integrate continuous security controls into the pipeline, including automated vulnerability scanning, static/dynamic code analysis, dependency checks, and policy enforcement.
• Continuously enhance software development processes and procedures, ensuring alignment with evolving mission needs, technology updates, and federal security mandates.
• Support updates to unit and integration tests, ensuring the test suites and corresponding CI/CD pipelines remain reliable, comprehensive, and aligned with software updates and new feature development.
• Assist in establishing and maintaining application platform environments across development, test, staging, and pre‑production, ensuring proper configuration, monitoring, and performance tuning.
• Design, develop, maintain, and secure OCI‑compliant container images tailored for Kubernetes environments, ensuring compliance with DoD, DHS, or agency‑specific container hardening requirements.
• Develop Infrastructure as Code (IaC) (e.g., Terraform, CloudFormation, Ansible) to provision scalable, secure, cloud‑based environments and automate infrastructure lifecycle management.
• Support deployment of microservices to cloud or on‑premises Kubernetes platforms, ensuring resiliency, fault tolerance, advanced networking configuration, and policy‑based traffic management.