DevSecOps Engineer - JobID-0331

Innovative Defense Technologies (IDT)

Fall River (MA)

On-site

USD 114,000 - 231,000

Full time

31 hours ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Benefits offered by this job

Generous benefits package

Competitive PTO

Tuition Assistance Reimbursement

Professional Development Resources

Pre-Tax Commuter Benefits

Annual Employee Recognition Awards

Job summary

Innovative Defense Technologies (IDT) seeks a DevSecOps Engineer to join our Internal DevSecOps team, based in Fall River, MA, with onsite requirement. The role focuses on designing CI/CD pipelines, multiple IaC modules, and secure software delivery in air-gapped settings.

You will automate security controls, manage our Software Factory stack, and collaborate with cross-functional teams to raise the bar on DX and secure software delivery across IDT.

Qualifications

5-7 years in a DevSecOps/DevOps/platform role with automation focus.
Bachelor’s degree in CS/Engineering or equivalent practical experience.
U.S. citizenship and ability to travel up to 10%.

Responsibilities

Design, architect, and optimize CI/CD pipelines using Jenkins.
Hard code and automate advanced security controls (SAST, SCA, container scanning, SBOM).
Configure, scale, and secure the Software Factory platform (GitLab, Artifactory, SonarQube).
Design IaC blueprints with Ansible and OpenTofu for environments and deployments.
Orchestrate containers with Podman and manage local registry sync.
Harden DSO deployments in air-gapped environments and ensure repeatable delivery.
Translate DISA STIGs, NIST 800-171, RMF into automation scripts.
Diagnose low-level system friction and implement long-term fixes.
Analyze telemetry and DX metrics to reduce pipeline friction.
Collaborate with cross-functional teams to promote DSO best practices.

Skills

CI/CD experience

Jenkins

Python scripting

Linux/Unix Bash

Git

Security

Active Secret clearance

5-7 years DevSecOps experience

SDLC methodologies

Automation

Security compliance

U.S. citizenship

Education

Bachelor’s degree in CS/Engineering

Tools

Jenkins

Podman

Docker

Kubernetes

Git

Ansible

OpenTofu

SonarQube

Job description

Department: Operations

Employment Type: Full Time

Location: Fall River, MA

Compensation: $114,000 - $231,000 / year

About The Role

Innovative Defense Technologies (IDT), a leading defense technology company, is seeking a DevSecOps Engineer to be part of our Internal DevSecOps team and based out of one of our locations: Mount Laurel NJ, Arlington, VA, or Fall River, MA.

Our internal DevSecOps (DSO) team's intent is to accelerate, across all IDT software teams, the experimentation, development, testing, and delivery of secure, compliant, and high-quality software. We will achieve this by maintaining a secure software factory and trusted DevSecOps environments, continuously improving the developer experience, and fostering collaboration and shared best practices across our engineering workflows. We will be successful when all software teams can confidently and independently deliver frequent prototypes, updates, and production ready releases through the DSO secured software factory with minimal IDSO intervention.

In this mid-level role, you will not just run pipelines, you will design CI/CD. You will architect reusable Infrastructure as Code (IaC) modules, automate security compliance frameworks, and engineer platform solutions that empower IDT software teams to deliver to our customers with confidence and velocity.

Clearance & Location Requirements

All applicants must be able to obtain/maintain an active Secret U.S. Security Clearance.
This is an on-site position. Requiring at least 3 days in office, based out of our Arlington, VA, Mount Laurel, NJ, or Fall River, MA office.

Key Responsibilities

What You Will Do

Design, architect, and optimize CI/CD pipelines using Jenkins, developing reusable pipeline templates and custom shared components to streamline execution across all software teams
Hard code and automate advanced security controls (SAST, SCA, container scanning, SBOM generation, secrets detection) directly into the pipeline fabric, establishing guardrails that run autonomously
Configure, scale, and secure our Software Factory platform (GitLab, JFrog Artifactory, SonarQube), managing system setups, staging and testing clusters, and automated tool backups
Design, modularize, and maintain Infrastructure as Code (IaC) blueprints using Ansible and OpenTofu, designing automation models the DSO team, as well as other engineering teams, can use to spin up environments and deployments
Orchestrate and optimize containerized clusters using Podman, securing cluster communications, and managing local registry synchronization.
Own and harden DSO platform deployments in secure, air-gapped environments, including:
- packaging and deploying dependencies
- remediating environment-specific issues
- supporting repeatable software delivery without external connectivity
- collaborate with the SECOPs teams to maintain DSO platform compliance
Automate compliance enforcement by translating DISA STIGs, NIST 800-171, and RMF controls into automated pipeline validation scripts and policy-as-code configurations
Diagnose and remediate complex, low-level system friction points (e.g., SELinux policy denials, pipeline token validation issues, and local network/VPN bottlenecks), defining long-term fixes to prevent recurrence
Analyze developer telemetry, feedback loops, and build metrics to proactively eliminate pipeline friction, continuously improving the overall Developer Experience (DX)
Partner with cross-functional software, security, and systems engineering teams to establish collaborative delivery patterns and guide developers on DSO best practices

Skills, Knowledge & Expertise

Who You Are (Required)

5-7 years of professional, post-graduation experience in a DevSecOps, DevOps, Platform/Systems Engineering, or Software Engineering role with a strong emphasis on automation or platform administration
Bachelor’s degree in Computer Science, Engineering, or a related technical field, or equivalent practical experience
U.S. citizenship
Ability to travel up to 10%
Strong working knowledge of modern, secure Software Development Life Cycle (SDLC) methodologies (e.g., Agile/Scrum, branching strategies, secure code reviews, automated linting, and release packaging)
Practical experience building and scale-optimizing CI/CD pipelines using Jenkins or some other CI/CD orchestrator (such as building custom shared libraries, declarative pipelines, or automated test hooks)
Practical experience orchestrating containerized workloads using Podman (or Docker/Kubernetes), including network configuration, container storage, and local registry sync
Proven capability writing and modularizing Infrastructure as Code (IaC) utilizing Ansible, OpenTofu, or some other automation technique, to deploy robust, repeatable environments
Intermediate programming depth in Python (e.g., writing API clients, custom scripts, or automation frameworks) combined with strong Linux/Unix systems-level Bash scripting
Strong proficiency with Git version control, including managing branch strategies, resolving merge conflicts, and utilizing Git Hooks or API-driven integrations
Demonstrated systems-level troubleshooting skills, with the ability to diagnose root causes of low-level OS, container, or CI/CD pipeline issues
Collaborative, enablement-focused mindset with strong communication skills, eager to mentor junior engineers and help software teams self-solve platform issues

What Makes You Stand Out

Experience designing Software Bill of Materials (SBOM) auditing workflows or navigating open-source license compliance (e.g., managing GPL/LGPL risks)
Experience architecting or configuring high-performance local AI infrastructure (e.g., GPU clusters, vLLM orchestration, or vector databases like Qdrant) behind a VPN or in air-gapped setups
Experience configuring custom pipeline diagnostics, usage telemetry, or observability stacks (Prometheus, Grafana, ELK) to monitor platform health and usage
Active Secret or Top Secret security clearance, with practical experience applying DISA STIGs or preparing environments for CMMC audits

Pay Range* $114,000 - $184,000 or $135,000 - $231,000

This amount may not be reflective of actual compensation that may be earned as pay is dependent on a candidate’s experience, skills, and education. The posted range does not include bonuses, commissions, tips, or other benefits. IDT is often looking to place multiple candidates at various levels. Therefore, more than one pay range has been included, commensurate with experience.

Job Benefits

Why Work At Innovative Defense Technologies (IDT)

IDT is a growing company with a vibrant, entrepreneurial culture. We are headquartered in Arlington, VA with additional offices in Fall River, MA; Mount Laurel, NJ; and San Diego, CA. At each location, our employees work together in a modern, snack-filled, and social office space, designing innovative solutions for our defense industry customers. We offer employees competitive pay and benefits including: