DevSecOps Engineer - Secure CI/CD for DoD Compliance

Oshkosh Corporation, Inc.; Town of New Hudson (NY); On-site; USD 110,000 - 160,000; Full time

Job summary

Pratt Miller, an Oshkosh company, is seeking a DevSecOps Engineer to design and maintain secure CI/CD pipelines for defense programs, aligning with CMMC Level 2 and NIST SP 800-171/172. The role emphasizes automation, testing, and secure deployment across cloud and on-prem environments.

You will collaborate with software, IT, and security teams to ensure compliant, auditable, and resilient systems hosting CUI, with opportunities to work across remote and on-site teams.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Active Secret or higher clearance preferred; must meet DoD requirements.
• Experience building secure CI/CD pipelines with GitLab, Jenkins, or Azure DevOps.
• Experience with SAST/DAST/SCA security testing and vulnerability management.
• Experience with CMMC Level 2 or NIST 800-171 in defense or government environments.
• Experience managing secure infrastructure in AWS GovCloud, Azure Government, or on-prem DoD environments.

Responsibilities

• Design, implement, and maintain secure DevSecOps infrastructure and pipelines for defense programs (CMMC Level 2).
• Embed security controls and automation in CI/CD pipelines using GitLab and related tools.
• Ensure secure coding practices and compliance with NIST SP 800-171/172 and CMMC Level 2.
• Collaborate with defense software and cybersecurity teams to integrate automated testing and vulnerability management.
• Identify tools to enhance security posture, automation, and monitoring capabilities.
• Maintain customer-focused security process effectiveness across projects.
• Research and implement new security technologies and methodologies.
• Stay updated on DoD cybersecurity standards, cloud governance, and zero-trust architectures.
• Collaborate across engineering, IT, and security teams; participate in design/code reviews.
• Work with remote/hybrid teams using MatterMost and GitLab.

Skills

DevSecOps

CI/CD

Security automation

Vulnerability management

NIST 800-171

CMMC Level 2

GitLab

Jenkins

Azure DevOps

Terraform

Ansible

Docker

Kubernetes

Cloud security

Zero-trust

Education

Bachelor’s degree in Computer Science, IT, Cybersecurity or related field

Advanced degree preferred

Tools

GitLab

Jenkins

Azure DevOps

Nexus

Ansible

Terraform

Docker

Kubernetes

OpenTelemetry

Prometheus

Kibana

Splunk

Jaeger

MatterMost

Jira/Atlassian

AWS GovCloud

Azure Government

Job description

Pratt Miller, an Oshkosh company, is seeking a DevSecOps Engineer to design and maintain secure CI/CD pipelines for defense programs, aligning with CMMC Level 2 and NIST SP 800-171/172. The role emphasizes automation, testing, and secure deployment across cloud and on-prem environments.

You will collaborate with software, IT, and security teams to ensure compliant, auditable, and resilient systems hosting CUI, with opportunities to work across remote and on-site teams.