DevSecOps Engineer – Secure Gov & Classified Environments

Decisive Point Group; Washington (District of Columbia); On-site; USD 170,000 - 210,000; Full time

Job summary

Applied Intuition, Inc. is seeking a highly skilled DevSecOps Engineer to own secure code integration across the software delivery lifecycle.

This role requires a DoD security clearance and collaboration with developers to ensure secure builds and deployments in Government and customer environments. You will design and enforce gates, automate security controls, and build a unified security-focused CI/CD stack, including SAST/DAST/SCA and IaC scanning.

Qualifications

• Bachelor’s degree or equivalent hands-on experience in a related field.
• Minimum of 5 years of experience across software engineering, DevOps, platform engineering, or security engineering.
• DoD 8140/8570 IAT level II (Security+ Certification, or equivalent).
• Hands-on scripting or software development experience using Python, Bash, Go, or similar languages.
• Experience with CI/CD platforms such as GitLab CI, GitHub Actions, Jenkins, or equivalent tooling.
• Production experience with containers and orchestration technologies such as Docker and Kubernetes.
• Experience with infrastructure-as-code or configuration management technologies such as Terraform or Ansible, AWS CDK, or CloudFormation.
• Hands-on AWS experience including Config, Security Hub, IAM, KMS, CloudTrail, and CloudWatch/EventBridge.
• Experience writing and deploying policy-as-code (OPA Rego, cfn-guard, Cedar, or equivalent).
• Working knowledge of NIST 800-53, NIST 800-171, DISA STIGs, RMF, and DFARS 252.204-7012 and CMMC Level 2 obligations.

Responsibilities

• Own secure code integration from source through build, test, release, and deployment.
• Directly support developers deploying software onto Government and customer systems.
• Build and maintain secure CI/CD pipelines, reusable pipeline templates, and hardened build environments.
• Integrate and tune SAST, DAST, SCA, secrets scanning, container scanning, and infrastructure-as-code scanning, consolidating toolchains into a single stack.
• Define and enforce promotion gates and remediation dates when needed.
• Serve as the primary technical resource for developers by troubleshooting findings and removing blockers.
• Automate system hardening, security validation, and compliance evidence collection using IaC and policy-as-code.
• Build preventive and detective controls in AWS GovCloud with automated remediation workflows.
• Lead threat modeling and security design reviews for new services and pipeline changes.

Skills

Security engineering

DevSecOps

Troubleshooting

Developer collaboration

Threat modeling

Education

Bachelor’s degree in Computer Science, Software Engineering, Cyber Security, or related field

Tools

GitLab CI

GitHub Actions

Jenkins

Docker

Kubernetes

Terraform

Ansible

AWS CDK

CloudFormation

OPA Rego

cfn-guard

Cedar

Job description

Applied Intuition, Inc. is seeking a highly skilled DevSecOps Engineer to own secure code integration across the software delivery lifecycle.

This role requires a DoD security clearance and collaboration with developers to ensure secure builds and deployments in Government and customer environments. You will design and enforce gates, automate security controls, and build a unified security-focused CI/CD stack, including SAST/DAST/SCA and IaC scanning.