DevSecOps Engineer - Secure CI/CD & Shift-Left (Hybrid)

Tier4 Group; Chambersburg (Franklin County); Hybrid; USD 140,000 - 170,000; Full time

Job summary

Tier4 Group is seeking a DevSecOps Engineer to integrate cybersecurity into Agile SDLC and CI/CD processes. The role requires DoD 8140 certification and a Top Secret clearance, with onsite 4 days per week in Fort Meade, MD or Chambersburg, PA.

Responsibilities include embedding security practices, implementing automated security testing, and translating DoD RMF/NIST requirements into concrete controls across cloud-native and modern apps.

Qualifications

• Bachelor's degree and 10+ years of related experience.
• Active Top Secret clearance required.
• Must live within commuting distance of Fort Meade, MD or Chambersburg, PA and be able to work onsite 4 days per week.

Responsibilities

• Embed cybersecurity engineering practices into Agile software development and modernization initiatives.
• Integrate security requirements and controls throughout the SDLC and CI/CD pipelines.
• Apply DevSecOps and shift-left security practices to identify and remediate vulnerabilities earlier in development.
• Implement and support automated security testing within CI/CD workflows.
• Participate in requirements discussions, design sessions, sprint planning, and other development lifecycle activities.
• Translate RMF, NIST SP 800-53, DoD cybersecurity policies, STIGs, and SRGs into actionable technical and development requirements.
• Partner with developers, architects, system owners, ISSMs, and ISSOs to develop achievable technical security controls prior to formal assessments.
• Provide threat-informed security guidance for legacy, modernized, and cloud-native applications.
• Support secure development of APIs, microservices, containerized workloads, and other modern application architectures.
• Help development teams remediate vulnerabilities while maintaining functionality and delivery objectives.
• Provide recommendations around authentication, encryption, network segmentation, application security, and other technical controls.
• Communicate security findings, technical risks, remediation recommendations, and implementation approaches to both technical and government stakeholders.
• Manage security engineering activities across multiple projects and development sprints.

Skills

Collaboration

Communication

Multi-tasking

Education

Bachelor's degree

DoD 8140 Work Role 652 Security Architect certification (SecurityX/CASP+ CE, CCSP, Cloud+, CISSP, CSSLP, CISM, CISSP-ISSAP, CISSP-ISSIP, GSEC)

Job description

Tier4 Group is seeking a DevSecOps Engineer to integrate cybersecurity into Agile SDLC and CI/CD processes. The role requires DoD 8140 certification and a Top Secret clearance, with onsite 4 days per week in Fort Meade, MD or Chambersburg, PA.

Responsibilities include embedding security practices, implementing automated security testing, and translating DoD RMF/NIST requirements into concrete controls across cloud-native and modern apps.