DevSecOps Engineer — Secure Pipelines for Defense

oshkoshcorporation; United States; Hybrid; USD 130,000 - 170,000; Full time

Job summary

Pratt Miller, an Oshkosh company, seeks a DevSecOps Engineer to design and maintain secure pipelines for defense projects under CMMC Level 2. You will embed security controls across cloud and on‑prem environments, using GitLab and related tooling to automate tests and compliance.

This hands‑on role partners with software, IT, and security teams to deliver auditable, resilient systems hosting CUI, while ensuring DoD cyber standards are met and continuous monitoring is maintained.

Qualifications

• Bachelor’s degree in CS/IT/cybersecurity or related field; advanced degree preferred.
• Must meet U.S. Government clearance requirements; active Secret or higher preferred.
• Experience developing secure CI/CD pipelines with GitLab, Jenkins, or Azure DevOps.
• Experience implementing automated security testing tools (SAST, DAST, SCA) and vulnerability management.
• Experience with CMMC Level 2 or NIST 800-171 compliance in defense or government environments.
• Experience managing secure infrastructure in AWS GovCloud, Azure Government, or on‑prem DoD‑accredited environments.

Responsibilities

• Design, implement, and maintain secure DevSecOps infrastructure and delivery pipelines to support defense programs under CMMC Level 2 compliance.
• Implement security controls and automation within CI/CD pipelines using GitLab and related DevSecOps tooling.
• Ensure adherence to secure coding practices, compliance with NIST SP 800-171/172, and CMMC Level 2 cybersecurity standards across software development and infrastructure management.
• Collaborate with defense software and cybersecurity teams to integrate automated testing, vulnerability management, and secure deployment strategies into cloud and on‑prem environments.
• Assist in identifying technologies and tools that enhance security posture, automation, and compliance monitoring capabilities.

Skills

DevSecOps

CI/CD pipelines

GitLab

NIST SP 800-171

CMMC Level 2

AWS GovCloud

Azure Gov

Security testing

Vulnerability management

Automation

Education

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field

Active U.S. Government clearance preferred

Tools

GitLab

Jenkins

Azure DevOps

Terraform

Ansible

AWS GovCloud

Azure Government

Job description

Pratt Miller, an Oshkosh company, seeks a DevSecOps Engineer to design and maintain secure pipelines for defense projects under CMMC Level 2. You will embed security controls across cloud and on‑prem environments, using GitLab and related tooling to automate tests and compliance.

This hands‑on role partners with software, IT, and security teams to deliver auditable, resilient systems hosting CUI, while ensuring DoD cyber standards are met and continuous monitoring is maintained.