DevSecOps Engineer: Secure CI/CD for DoD Projects

Oshkosh Corporation, Inc.; Michigan; On-site; USD 120,000 - 150,000; Full time

Job summary

Pratt Miller, an Oshkosh company, seeks an experienced DevSecOps Engineer to build secure development pipelines and automate compliance across cloud and on-prem environments. You will work with defense programs to ensure continuous monitoring, vulnerability management, and secure deployment in GovCloud/Azure Gov environments.

The role requires hands-on expertise in CI/CD, IaC tooling, and DoD security standards, with opportunities to influence security architecture and incident response across

Qualifications

• Bachelor’s degree in CS/IT/Cybersecurity or related field.
• Experience implementing secure CI/CD pipelines and DoD-compliant frameworks.
• Proficiency with GitLab/Jenkins/Azure DevOps and IaC tooling.
• Knowledge of NIST SP 800-171, CMMC 2, and cloud/on-prem DoD environments.

Responsibilities

• Design, implement, and maintain secure DevSecOps pipelines for defense programs.
• Enforce secure coding practices and compliance across CI/CD workflows.
• Collaborate with security, software, and IT teams to automate testing and vulnerability management.
• Support DoD accreditation activities and continuous monitoring in GovCloud or Azure Gov.

Skills

DevSecOps

CI/CD

SecurityAutomation

VulnerabilityMgmt

CloudSecurity

ZeroTrust

NIST800-171

CMMC2

GitLab

Jenkins

AzureDevOps

Terraform

Ansible

Docker

Kubernetes

AWS GovCloud

AzureGov

OnPremDoD

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

GitLab

Jenkins

Azure DevOps

Terraform

Ansible

Docker

Kubernetes

SAST

DAST

SBOM

Prometheus

Kibana

Splunk

MatterMost

Job description

Pratt Miller, an Oshkosh company, seeks an experienced DevSecOps Engineer to build secure development pipelines and automate compliance across cloud and on-prem environments. You will work with defense programs to ensure continuous monitoring, vulnerability management, and secure deployment in GovCloud/Azure Gov environments.

The role requires hands-on expertise in CI/CD, IaC tooling, and DoD security standards, with opportunities to influence security architecture and incident response across