DevSecOps Engineer - JobID-0336

Innovative Defense Technologies (IDT)

San Diego (CA)

On-site

USD 114,000 - 184,000

Full time

25 hours ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

401(k) matching

Paid holidays

Tuition assistance

Professional development

Job summary

Innovative Defense Technologies (IDT) seeks a DevSecOps Engineer for the IMS team in San Diego, CA. Lead cybersecurity accreditation activities, implement RMF, automate security gates in CI/CD, and maintain secure engineering documentation.

You will work onsite with Navy stakeholders, ensuring continuous monitoring and RMF compliance across mission systems. Active Secret clearance and 10% travel required.

Qualifications

Bachelor's Degree in Cyber Security, Information Assurance, CS, IT, or equivalent experience.
DoD 8570/8140 baseline requirements: IAM Level 1 cert or degree-based qualification.
5+ years in Cybersecurity or Systems Engineering in DIB with RMF mastery.
Ability to travel up to 10% of the time.

Responsibilities

Design and implement secure, high-performance architectures for autonomous systems and AI-driven platforms.
Embed automated security gates (SAST/DAST/IAST) into CI/CD pipelines.

Skills

RMF

CI/CD security

DOD 8570/8140 IAM

SAST/DAST/IAST

Kubernetes

Docker

ISSO

Security accreditation

Zero Trust

Vulnerability management

Education

Bachelor's Degree in Cyber Security/CI

Tools

ESXi/KVM

Ansible

Terraform

Puppet

Job description

Compensation: $114,000 - $184,000 / year

Department: Engineering

Location: San Diego, CA

Compensation: $114,000 - $184,000 / year

Description

Innovative Defense Technologies (IDT), a leading defense technology company, is seeking a DevSecOps Engineer to be part of our Integrated Mission Systems (IMS) team and based out of our San Diego, CA location.

This DevSecOps Engineer will lead and support cybersecurity accreditation activities for mission-critical Department of War systems, including Authority to Operate (ATO) efforts, Risk Management Framework (RMF) implementation, vulnerability management, continuous monitoring through the Navy and DoW's DevSecOps deployment pipelines, and security engineering activities supporting U.S. Navy programs. Duties will also include providing and maintaining documentation for processes and procedures, while also providing support to internal engineers or customers on-site.

Clearance & Location Requirements:

All applicants must be able to obtain/maintain an active Secret U.S. Security Clearance.
This is an on-site position. Requiring at least 4 days in office, based out of our San Diego, CA location and nearby government facilities.

Key Responsibilities

What You Will Do:

Help design and implement secure, high-performance architectures for autonomous systems, AI-driven platforms, and edge-computing devices.
Embed automated security gates (SAST, DAST, IAST, SRM) into CI/CD pipelines to ensure that security is "code-driven" rather than a manual bottleneck.
Lead the transition from static RMF cycles to Continuous Authority to Operate (cATO) by automating control verification and continuous monitoring.
Architect secure multi-tenant environments using virtualized (Type-1 Hypervisors) and containerized orchestration (Kubernetes) tailored for IL5/IL6 mission sets.
Engineer Identity, Credential, and Access Management (ICAM) solutions that enforce Zero Trust principles across distributed hardware and software nodes.
Lead RMF efforts across all six RMF steps including Categorization, Control Selection, Control Implementation, Assessment, Authorization, and Continuous Monitoring.
Develop and maintain RMF artifacts including SSPs, SARs, SAPs, POA&Ms, inventories, architecture diagrams, and continuous monitoring documentation.
Coordinate directly with U.S. Navy Authorizing Officials (AOs), Security Control Assessors (SCAs), ISSMs, ISSOs, and Program Managers. Performing regular server updates, patch management, and software installations.
Manage cybersecurity authorization packages and support (I)ATO & (I)ATT activities.
As needed, performing ACAS Scans on various devices across multiple systems
Collect, review, and submit various STIG checklists for RMF processes
Develop and maintain access control policies for various organization assets
Remediate Vulnerabilities and documenting POAMs as required.
Work with developers and engineers to implement, maintain, and review security processes to maintain compliance and ensure user permissions are accordingly
Help develop and maintain various golden images in support of business area activities to include operating system images and virtual machines.
Create and maintain detailed documentation of systems and networks for usage by both technical and non-technical stake holders
Serve as the appointed Information System Security Officer (ISSO) for product-level Authorizations to Operate (ATOs) and DCSA authorized information systems, supporting security authorization activities and ensuring compliance with applicable cybersecurity policies, standards, and regulatory requirements.
Perform continuous monitoring (ConMon) activities as assigned by the Information System Security Manager (ISSM) and in accordance with established Risk Management Framework (RMF) requirements and the approved System Security Plan (SSP), including vulnerability assessments, security control assessments, STIG compliance, Plan of Action and Milestones (POA&M) management, and ongoing evaluation of the system security posture to maintain authorization compliance.
Coordinate with the ISSM on all information system security matters and serve as the on-site representative for DSCA-related activities.

Skills, Knowledge & Expertise

Who You Are (Required):

Bachelor's Degree in in Cyber Security, Information Assurance, Computer Science, Information Technology or equivalent full-time professional experience
Must satisfy DoD 8570/8140 baseline requirements through either:
- Approved 8570/8140 IAM Level 1 certification (Security+, SSCP, GSEC); or
- Relevant qualifying degree (Cybersecurity, Computer Science, IT, or related STEM discipline) recognized by the DoD 8140 educational matrix.
5+ years experience in Cybersecurity or Systems Engineering within the Defense Industrial Base (DIB), with a mastery of the Risk Management Framework (RMF).
Ability to travel up to 10% of the time as needed

What Makes You Stand Out:

5+ years in Cybersecurity or Systems Engineering within the Defense Industrial Base (DIB), with a mastery of RMF; this includes:
- Experience navigating the Department of the Navy RAISE 2.0 process to achieve continuous cyber readiness and inherit platform Authority to Operate (cATO/eATO) for containerized mission applications.
- Familiarity with the Overmatch Software Armory (or similar Navy DevSecOps Platforms / RAISE Platforms of Choice) for pipeline execution, automated security gating, SBOM generation, and container scanning.
- Familiarity with deploying, hardening, or integrating software services within Navy tactical environments, specifically ACS and CANES architectures.
- Proficient in CI/CD pipelines, including automated STIG compliance, SAST/DAST, vulnerability remediation, and container hardening to meet Navy Cyber Ready directives.
Expert-level knowledge of securing OCI-compliant containers (Docker) and Kubernetes (K8s) clusters, including network policies, service meshes (Istio), and runtime security.
Significant experience with Server Virtualization (ESXi, KVM) and Desktop Virtualization (VDI), including hardware-root-of-trust and secure hypervisor configuration.
Firm grasp of Infrastructure as Code (IaC) deployments of secure, reproducible environments using Terraform, Ansible, or CloudFormation.
Experience with automated security assessment tools (ACAS/Nessus, SCAP) and the technical integration of security data into eMASS.
Experience with configuring multiple forms of authentication to include PKI concepts.
Experience with having to identify hardware and/or software for purchase to meet various use-cases.
Experience with Ansible, PowerShell, Chef, Salt, Puppet, or any other configuration automation software.
DoD 8570/8140 IAM Level III (CISSP, CISM) Certified

Pay Range*: $114,000 - $184,000

*Pursuant to California Senate Bill 1162, IDT is required to disclose the “pay scale” or “pay range” associated with a job posting. Notably, however, this amount may not be reflective of actual compensation that may be earned as pay is dependent on a candidate’s experience, skills, and education. The posted range does not include bonuses, commissions, tips, or other benefits. IDT is often looking to place multiple candidates at various levels. Therefore, more than one pay range has been included, commensurate with experience.

Why Work at Innovative Defense Technologies (IDT):

IDT is a growing company with a vibrant, entrepreneurial culture. We are headquartered in Arlington, VA with additional offices in Fall River, MA; Mount Laurel, NJ; and San Diego, CA. At each location, our employees work together in a modern, snack-filled, and social office space, designing innovative solutions for our defense industry customers. We offer employees competitive pay and benefits including:

Job Benefits