DevSecOps Engineer, Staff

AMERICAN SYSTEMS; Middletown (RI); On-site; USD 82,000 - 131,000; Full time

Job summary

AMERICAN SYSTEMS is a federal government contractor delivering strategic IT, engineering, and training solutions. The DevSecOps Engineer will design secure, automated pipelines and harden Linux environments while aligning with DoD RMF and NIST controls.

The role requires DoD context experience, Secret Clearance, and hands-on work with cloud platforms and integration of security tools across CI/CD and IaC. Collaboration with ISSOs and program managers is essential.

Qualifications

• 3-5 years' experience in classified or air-gapped DoD-style environments.
• Secret Clearance REQUIRED.
• Hands-on experience with DevSecOps platforms such as Platform One or similar.
• Experience with cloud platforms (AWS/Azure/GCP) in government context (IL4/IL5).
• Relevant certifications (Security+ CE, CISSP, CASP+ or DoD 8570/8140).
• Experience with Agile/Scrum or SAFe in defense programs.

Responsibilities

• Design, implement, and maintain CI/CD pipelines with security tooling.
• Harden Linux-based systems per DoD standards (STIGs, CIS Benchmarks).
• Implement security controls and support RMF/NIST compliance.
• Collaborate with government customers, engineers, and program managers.
• Provide technical leadership and mentor junior engineers.

Skills

Secret clearance

Linux expertise

Strong communication

Education

Security certifications (e.g., CISSP, Security+)

DoD 8570/8140 certifications

Tools

Platform One

Iron Bank

HashiCorp Vault

AWS

Azure

GCP

Job description

Overview

AMERICAN SYSTEMS is an employee-owned federal government contractor supporting national priority programs through our strategic solutions in the areas of Information Technology, Test & Evaluation, Engineering & Analysis, and Training.

Responsibilities

The DevSecOps Engineer will design, implement, and maintain secure, automatedsoftware delivery pipelines in support of U.S. defense acquisition programs. This rolerequires strong Linux expertise, hands-on experience with modern DevSecOps practices, and a solid understanding of DoW acquisition environments, processes, and security requirements. You will collaborate with development, security, and operations teams to ensure mission-critical systems are built, tested, and deployed securely and reliably.

Key Responsibilities

• DevSecOps & Automation
  • Design, implement, and maintain CI/CD pipelines (e.g., GitLab CI, GitHub Actions, Jenkins, Azure DevOps) to automate build, test, security scanning, and deployment processes.
  • Integrate security tools (SAST, DAST, SCA, container scanning, secret detection) into the pipeline and enforce “shift-left” security practices.
  • Develop and maintain Infrastructure as Code (IaC) using tools such as Terraform, Ansible, Helm, or CloudFormation.
  • Implement and manage configuration management and environment provisioning for development, test, staging, and production environments.
• Linux & Platform Engineering
  • Administer and harden Linux-based systems (RHEL, CentOS, Rocky, Ubuntu, or similar) in accordance with DoD security standards (e.g., STIGs, CIS Benchmarks).
  • Manage system services, networking, access controls, logging, and system monitoring on Linux platforms.
  • Troubleshoot performance, reliability, and security issues on Linux servers, containers, and virtual machines.
  • Build and maintain containerized workloads (Docker/Podman) and orchestrated environments (Kubernetes/OpenShift or similar).
• Security & Compliance
  • Implement and maintain security controls in line with DoW and federal requirements (e.g., RMF, NIST SP 800-53, NIST 800-171, CMMC).
  • Support Authority to Operate (ATO) activities by producing required DevSecOps and system artifacts (e.g., pipeline documentation, security test results, configuration baselines).
  • Collaborate with ISSOs, security engineers, and program managers to ensure continuous compliance and vulnerability remediation.
  • Implement monitoring, alerting, and logging solutions (e.g., ELK/EFK, Splunk, Prometheus/Grafana) to support security operations and incident response.
• Defense Acquisition Support
  • Work within the constraints and requirements of DoW acquisition lifecycle frameworks (e.g., DoDI 5000 series, DoW 5000.02, Adaptive Acquisition Framework).
  • Align DevSecOps practices with program milestones, deliveries, and documentation expectations (e.g., CDR, TRR, test events, fielding).
  • Participate in technical reviews, risk assessments, and planning sessions with program stakeholders and government customers.
  • Provide technical input to acquisition artifacts such as System Engineering Plans, Test Plans, and Cybersecurity Strategies.
• Collaboration & Technical Leadership
  • Partner with developers, system engineers, cybersecurity, and program management to define secure architecture patterns and deployment strategies.
  • Champion DevSecOps best practices, secure coding standards, and continuous improvement across the team.
  • Mentor junior engineers and contribute to internal standards, templates, and playbooks.

Qualifications

• 3-5 years' experience in classified or air-gapped environments and with cross-domain ordisconnected DevSecOps workflows.
• Secret Clearance REQUIRED.
• Hands-on experience with:
  • DoW Enterprise DevSecOps platforms (e.g., Platform One, Iron Bank, relevant containers registries)
  • Secrets management tools (e.g., HashiCorp Vault, AWS Secrets Manager, Key Management Systems)
  • Cloud platforms (AWS, Azure, GCP) and hybrid/multi-cloud environments in a government context (e.g., IL4/IL5, GovCloud).
• Relevant certifications, such as:
  • Security+ CE, CISSP, CASP+, or other DoD 8570/8140 certifications Red Hat (RHCSA/RHCE), Linux Foundation (CKA/CKAD), or similar DevOps/Cloud certifications (e.g., AWS/Azure DevOps Engineer, CNCF).
• Experience with Agile/Scrum or SAFe in defense programs.
• Strong written and verbal communication skills, including the ability to document architectures, pipelines, and security controls clearly for technical and non-technical stakeholders.
• Ability to work collaboratively in a multi-disciplinary, multi-contractor environment.
• Demonstrated problem-solving skills and ownership mindset in highly regulated,mission-critical contexts.

Pay Transparency Statement

AMERICAN SYSTEMS is committed to pay transparency for our applicants and employee-owners. The salary range for this position is USD $82,100.00/Yr. - USD $131,360/Yr. Actual compensation will be determined based on several factors permitted by law. AMERICAN SYSTEMS provides for the welfare of its employees and their dependents through a comprehensive benefits program by offering healthcare benefits, paid leave, retirement plans, insurance programs, and education and training assistance.

EEO Statement

EEO Race/Sex/Disability Status/Veteran Status