DevSecOps Engineer / Platform Application SME - Advanced Technological Solutions, LLC

OpenTalent; Fort Meade (MD); On-site; USD 120,000 - 180,000; Full time

Job summary

OpenTalent in Maryland Fort Meade seeks a dynamic DevSecOps Engineer / Platform Application SME to securely deploy, integrate, and operate containerized apps on the platform. You will ensure applications from other teams can be onboarded, CI/CD and GitOps workflows are secure, and operations remain compliant across the lifecycle.

You will apply DevSecOps across deployment lifecycles, integrating security controls, automated testing, vulnerability management, and SBOMs.

Qualifications

• Experience securing containerized deployments and CI/CD pipelines.
• Knowledge of RBAC, secrets management, and secure config.
• Experience with SBOMs and software supply chain security.
• Proven ability to onboard applications to shared platform securely.

Responsibilities

• Containerize and package applications for deployment using Docker/Podman and Helm/Kustomize.
• Deploy and operate DNS services within containerized environments.
• Onboard applications securely to the shared platform across teams.
• Implement CI/CD and GitOps pipelines with Jenkins, GitLab CI, Argo CD.
• Integrate automated security controls (SAST/DAST/SCA) into pipelines.
• Assist with software supply-chain practices and SBOM management.
• Enforce container/Kubernetes/OpenShift security practices and RBAC.

Skills

Containerization

CI/CD pipelines

DevSecOps

Kubernetes/OpenShift security

RBAC & Secrets Management

Security testing (SAST/DAST/SCA)

SBOMs

Tools

Docker

Podman

OpenShift

Helm

Kustomize

Argo CD

Jenkins

GitLab CI

Job description

Overview We are seeking a dynamic and highly skilled DevSecOps Engineer / Platform Application Subject Matter Expert (SME) to join our innovative team. Serves as the subject matter expert for securely deploying, integrating, and operating containerized applications and services on the platform. The role is not primarily responsible for building the underlying platform; rather, it ensures applications delivered by other teams can be securely onboarded, continuously integrated, deployed, monitored, and operated within the platform environment.

Applies DevSecOps principles throughout the application deployment lifecycle by integrating security controls, automated testing, vulnerability management, configuration management, and continuous compliance into CI/CD and GitOps workflows. May also function as a Platform Engineer and serves as a key liaison between application development, cybersecurity, and platform engineering teams.

Responsibilities

• Strong containerization skills using Docker, Podman, or equivalent technologies, including experience packaging applications for deployment using Helm charts, Kustomize, OpenShift Templates, or comparable technologies.
• Experience deploying and operating foundational network/platform services, such as authoritative DNS (e.g., PowerDNS), within a containerized environment.
• Ability to securely onboard applications built by other teams, such as an agentic coding suite or data mesh component, onto the shared platform, including troubleshooting application, dependency, integration, configuration, networking, and security issues.
• Strong working knowledge of CI/CD and GitOps pipelines for application build, test, security validation, deployment, and lifecycle management using technologies such as Jenkins, GitLab CI, Argo CD, or equivalent.
• Experience integrating automated security controls into CI/CD pipelines, including static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), dependency scanning, container image scanning, secrets detection, and infrastructure/configuration scanning.
• Experience supporting secure software supply-chain practices, including management and validation of trusted container images, software dependencies, artifact repositories, image registries, and software bills of materials (SBOMs).
• Working knowledge of container and Kubernetes/OpenShift security practices, including role-based access control (RBAC), secrets management, security contexts, network policies, image security, least-privilege principles, and secure configuration of application workloads.
• Ability to identify, assess, troubleshoot, and coordinate remediation of application and container vulnerabilities discovered during build, deployment, or operation.