DevSecOps Engineer IRES - SSFB/HSV

Amentum; Colorado Springs (CO); On-site; USD 140,000 - 175,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

401(k) matching

Educational reimbursement

Parental leave

Employee stock purchase plan

Job summary

Amentum is seeking a DevSecOps Engineer to design, secure, and operate scalable cloud and on‑prem infrastructure across DoD environments. You will integrate security throughout the SDLC, automate deployments, and lead platform reliability initiatives with cross‑functional teams.

The role requires hands‑on leadership, strong experience in IaC and CI/CD, and active DoW Secret clearance. On-site work at Schriever/South locations may be required with up to 10% travel.

Qualifications

• 6+ years of general (full-time) work experience.
• 4+ years in systems eng, cloud infra, SRE, platform engineering, DevOps, DevSecOps or related field.
• 6+ months in a management/leadership role.
• Production infra design/operation in AWS, Azure, GCP, private/hybrid environments.
• Infrastructure as Code and configuration-management tools proficiency.
• CI/CD pipelines using GitLab CI/CD, Jenkins, GitHub Actions, Azure DevOps or equivalent.
• Linux administration, networking fundamentals, scripting/automation (Python, Bash, PowerShell, Go).
• Container/orchestration experience (Kubernetes/OpenShift).
• Security engineering principles: IAM, vulnerability mgmt, encryption, logging.
• Monitoring/observability tools (Prometheus, Grafana, Elastic Stack, Splunk, CloudWatch).
• DoW 8570 IAT Level II certification and active DoW Secret Clearance.

Responsibilities

• Design, deploy and maintain scalable, secure infrastructure across cloud/hybrid/on-premises environments.
• Develop and manage IaC using Terraform, Ansible, CloudFormation, Pulumi, or equivalent.
• Build and improve CI/CD pipelines with integrated security controls and approvals.
• Integrate security into the software lifecycle, including scanning and remediation workflows.
• Engineer and operate container platforms using Docker, Kubernetes, OpenShift.
• Establish observability with logging, metrics, dashboards, and SLOs.
• Implement IAM, secrets management, encryption and least-privilege controls.
• Support availability, incident response, DR, backup, and continuity activities.
• Automate routine operations to reduce drift and MTTR.
• Maintain technical standards, runbooks, and run design reviews.
• Mentor junior engineers and promote secure coding and reliability.

Skills

DevSecOps

CI/CD pipelines

Terraform

Kubernetes

Python scripting

Linux administration

Security engineering

Education

Bachelor's degree in a related field

Tools

Terraform

Ansible

CloudFormation

Pulumi

GitLab CI/CD

Jenkins

Azure DevOps

Job description

Position Title: DevSecOps Engineer

Location: Schriever Space Force Base, Colorado Springs, CO or Redstone Arsenal, Huntsville, AL

Relocation Assistance: None available at this time

Remote/Telework: NO - Not available for this position

Clearance Type: DoW Secret

Shift: Day shift

Travel Required: Up to 10% of the time

Description of Duties

The DevSecOps Engineer supports the Missile Defense Agency (MDA) on the Integrated Research and Development for Enterprise Solutions (IRES) contract. The DevSecOps Infrastructure Engineer designs, implements, secure and operates the cloud and on-premises infrastructure that enables reliable software delivery and mission‑critical services. The role integrates security throughout the software development lifecycle, improves platform resiliency, observability and establishes repeatable infrastructure and deployment practices through automation. The successful candidate is a hands‑on technical leader who can translate engineering and security requirements into scalable platforms capabilities. They will partner closely with software engineers, cybersecurity personnel, systems administrators, product teams and program leadership to deliver secure, maintainable and compliant infrastructure.

Key Responsibilities

• Design, deploy and maintain scalable, resilient and secure infrastructure across cloud, hybrid and/or on‑premises environments.
• Develop and manage Infrastructure as Code (IaC) using tools such as Terraform, Ansible, CloudFormation, Pulumi or equivalent.
• Build, maintain and improve continuous integration and continuous delivery (CI/CD) pipelines that incorporate automated security controls, testing, artifact management and deployment approvals.
• Integrate security practices into the development lifecycle, including code scanning, dependency scanning, secret detection, container image scanning, configuration validation and vulnerability remediation workflows.
• Engineer and operate containerized platforms using Docker, Kubernetes, OpenShift or comparable technologies.
• Establish platform observability through centralized logging, metrics, alerting, tracing, dashboards and service‑level objectives.
• Implement identity, access, secret‑management, encryption, network segmentation and least‑privilege controls in partnership with cybersecurity stakeholders.
• Support system availability, incident response, root‑cause analysis, disaster recovery, backup and continuity‑of‑operations activities.
• Automate routine operational activities to reduce manual effort, configuration drift, deployment risk and mean time to restore service.
• Define and maintain technical standards, reference architectures, runbooks and operational documentation.
• Conduct infrastructure and deployment design reviews; identify technical risks, security gaps, performance constraints and remediation options.
• Mentor junior engineers and promote engineering practices for secure coding, operational readiness, automation and infrastructure reliability.
• Coordinate with engineering, security, compliance and program stakeholders to prioritize platform improvements and resolve cross‑functional issues.

The successful candidate will:

• Have strong written and verbal communication skills, including the ability to document technical decisions and brief technical and nontechnical stakeholders.

Basic Requirements

• Must have 6, or more, years of general (full‑time) work experience
• May be reduced with completion of advanced education
• Must have 4, or more, years of experience in systems engineering, cloud infrastructure, site reliability engineering, platform engineering, DevOps, DevSecOps or a related technical discipline.
• Must have 6, or more, months of experience working in a management or leadership role
• Must have demonstrated experience designing and operating production infrastructure in AWS, Microsoft Azure, Google Cloud Platform, private cloud and/or hybrid environments.
• Must have strong proficiency with Infrastructure as Code and configuration‑management tools.
• Must have experience designing, implementing and maintaining CI/CD pipelines using platforms such as GitLab CI/CD, Jenkins, GitHub Actions, Azure DevOps or equivalent.
• Must have experience with Linux administration, networking fundamentals, scripting and automation using Python, Bash, PowerShell, Go, or similar languages.
• Must have experience operating container and orchestration technologies, including Kubernetes and OpenShift.
• Must have a working knowledge of security engineering principles, including identity and access management, vulnerability management, secure configuration baselines, secrets management, encryption and logging.
• Must have experience with monitoring and observability tooling such as Prometheus, Grafana, Elastic Stack, Splunk, Datadog, CloudWatch or equivalent.
• Must be able to troubleshoot complex distributed‑system, infrastructure, networking, deployment and security issues.
• Must have a current DoW 8570 IAT Level II certification (ex: Security+ or equivalent)
• Must have an active DoW Secret Security Clearance

Desired Requirements

• Have a Bachelor’s degree, or higher, in computer science, information systems, engineering, cybersecurity or a related field; equivalent relevant experience may be considered.
• Have experience supporting regulated, government, defense or other high‑assurance environments.
• Relevant certifications, such as AWS Certified Solutions Architect, AWS Certified DevOps Engineers, Microsoft Azure Administrator/DevOps Engineer, Certified Kubernetes Administrator, Red Hat Certified Specialist, CISSP, CCSP or equivalent.
• Have experience implementing policy‑as‑code and security‑as‑code practices using tools such as Open Policy Agent, Kyverno, Checkov, tfsec, Trivy, Snyk, SonarQube or equivalent.
• Have experience with Zero Trust architecture concepts and implementation.
• Knowledge of secure software supply‑chain practices, including software bill of materials, artifact signing, provenance and dependency management.
• Have experience with high‑availability design, disaster recovery, capacity planning and performance engineering.
• Be familiar with Agile delivery, product management and technical program execution.
• Have an active DoW Top Secret Security Clearance

This position will be posted for a minimum of 3 days. If a candidate has not been selected at that time, it will continue to be posted until a suitable candidate is selected or the position is closed.

Compensation Details

$140,000 – $175,000

The compensation range or hourly rate listed for this position is provided as a good‑faith estimate of what the company intends to offer for this role at the time this posting was issued. Actual compensation may vary based on factors such as job responsibilities, education, experience, skills, internal equity, market data, applicable collective bargaining agreements, and relevant laws.

Benefits Overview

• Health, dental, and vision insurance
• Paid time off and holidays
• Retirement benefits (including 401(k) matching)
• Educational reimbursement
• Parental leave
• Employee stock purchase plan
• Tax‑saving options
• Disability and life insurance
• Pet insurance

Note: Benefits may vary based on employment type, location, and applicable agreements. Positions governed by a Collective Bargaining Agreement (CBA), the McNamara‑O'Hara Service Contract Act (SCA), or other employment contracts may include different provisions/benefits.

Original Posting

10/01/2026 - 10/15/2026

Amentum anticipates this job requisition will remain open for at least three days, with a closing date no earlier than three days after the original posting. This timeline may change based on business needs.

Amentum is proud to be an Equal Opportunity Employer. Our hiring practices provide equal opportunity for employment without regard to race, sex, sexual orientation, pregnancy (including pregnancy, childbirth, breastfeeding, or medical conditions related to pregnancy, childbirth, or breastfeeding), age, ancestry, United States military or veteran status, color, religion, creed, marital or domestic partner status, medical condition, genetic information, national origin, citizenship status, low‑income status, or mental or physical disability so long as the essential functions of the job can be performed with or without reasonable accommodation, or any other protected category under federal, state, or local law. Learn more about your rights under Federal laws and supplemental language at Labor Laws Posters.