DevSecOps Engineer — Secure Cloud & RMF Expert

Socket.dev; Herndon (VA); On-site; USD 120,000 - 165,000; Full time

Benefits offered by this job

Health insurance

401(k) Plan

Paid Time Off (PTO)

Paid wellness leave

Tuition reimbursement

Certifications & training

Job summary

NetImpact Strategies seeks a DevSecOps Engineer to support secure cloud infrastructure within a DoD environment. The role blends DevSecOps with RMF/ATO documentation and cybersecurity collaboration.

You will design and operate secure cloud platforms, manage Docker/Kubernetes, and build CI/CD pipelines while following DISA STIGs and NIST controls. Strong writing and teamwork are essential.

Qualifications

• Bachelor's degree in CS, IT, cybersecurity, engineering, or related field.
• 4+ years of experience in DevOps/DevSecOps/cloud engineering.
• Hands-on experience with Linux, Docker, Kubernetes, Git, and major cloud platforms (AWS/Azure).
• Experience creating CI/CD pipelines and IaC (Terraform, CloudFormation).
• Knowledge of cloud networking, IAM, secrets management, encryption, monitoring, vulnerability management, patching.
• Familiarity with DoD RMF/ATO lifecycle, NIST SP 800-53, DISA STIGs, and POA&M documentation.

Responsibilities

• Design, deploy, maintain, and troubleshoot secure cloud infrastructure and applications across development, testing, and production environments.
• Administer Docker and Kubernetes environments, including deployments, networking, configuration, storage, scaling, and upgrades.
• Develop and maintain CI/CD pipelines that automate application builds, testing, security scanning, and deployment.
• Implement Infrastructure as Code using Terraform, CloudFormation, Ansible, or comparable technologies.
• Administer Linux systems and troubleshoot issues across applications, containers, networks, operating systems, and cloud services.
• Implement monitoring, logging, alerting, backup, recovery, and operational automation capabilities.
• Apply security baselines, DISA STIGs, patching requirements, least-privilege access, and secure configuration practices.
• Identify, prioritize, remediate, and document vulnerabilities and security findings.
• Support DoD RMF and ATO activities by developing and maintaining SSPs, POA&Ms, architecture diagrams, inventories, data flows, PPSM documentation, and remediation evidence.
• Work with ISSOs, ISSMs, engineers, developers, and assessors to document NIST SP 800-53 control implementations and maintain accurate authorization packages.

Job description

NetImpact Strategies seeks a DevSecOps Engineer to support secure cloud infrastructure within a DoD environment. The role blends DevSecOps with RMF/ATO documentation and cybersecurity collaboration.

You will design and operate secure cloud platforms, manage Docker/Kubernetes, and build CI/CD pipelines while following DISA STIGs and NIST controls. Strong writing and teamwork are essential.