DevSecOps Engineer (TS Cleared Only)

HyerTek, Inc.; Northern (KY); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) with employer contribution

Paid time off and company holidays

Professional development and certs

Employee assistance program (EAP)

Life and disability insurance

Job summary

HyerTek, Inc. is seeking a Sr. DevSecOps Engineer to own the software supply chain and delivery pipeline for federal solutions.

You will manage secure CI/CD pipelines, build hardened container images, integrate security checks, and ensure accreditation in Azure Government enclaves and DoD environments. Hybrid on-site near Fort Meade, MD with 2-3 days in accredited facilities. The ideal candidate has 5+ years in DevOps/DevSecOps, strong GitHub and Azure DevOps skills, Kubernetes experience, SBOM

Qualifications

• 5+ years of hands-on DevOps/DevSecOps in security-sensitive environments.
• Knowledge of GitHub Enterprise and Azure DevOps configurations and policies.
• Experience designing and maintaining CI/CD in GitHub Enterprise and Azure DevOps.
• Experience building secure container images with hardened base images and non-root runtimes.
• Production Kubernetes experience (AKS/OpenShift) and deployment config.
• Experience integrating automated security into pipelines (code, dependencies, secrets, containers).
• Familiarity with SBOM generation, artifact signing, provenance, and controlled promotion.

Responsibilities

• Design, maintain, and improve secure CI/CD pipelines across repositories and environments.
• Build and maintain secure containerized applications for Kubernetes platforms (AKS/OpenShift).
• Automate security and compliance checks within development pipelines and address findings.
• Manage artifacts, SBOMs, signing, provenance, and promotion between environments.
• Manage secrets/configuration using approved vault tools and IaC.
• Automate RMF/ATO evidence, monitoring, and security reporting.
• Collaborate with developers, cybersecurity, and operations to reduce vulnerabilities.
• Create technical docs and runbooks for operations and handoffs.

Skills

DevSecOps

CI/CD pipelines

GitHub Actions

Azure DevOps

Kubernetes

Security automation

SBOMs

Secrets management

RMF/ATO

IAT II certification

TS/SCI clearance

Tools

AKS/OpenShift

Terraform/Bicep/ARM

Job description

All Jobs > DevSecOps Engineer (TS Cleared Only)

HyerTek is a federal technology consulting firm delivering secure enterprise applications, data analytics, and modernization services to federal government agencies. HyerTek is hiring a Sr. DevSecOps Engineer to own the software supply chain and delivery pipeline behind our federal solutions — from a developer's commit through hardened container build, automated security gating, signed artifact, and accredited release into Azure Government enclaves at DoD Impact Levels 5, 6. and into sensitive compartmented environments. You will make security a property of the pipeline rather than a review at the end of it, and you will produce the continuous evidence that keeps an Authority to Operate current.

Location: This is a hybrid on-site position at Fort George G. Meade, Maryland. Candidates must be located in, or willing to relocate to, the Baltimore–Washington corridor within commuting distance of Fort Meade. Work is performed in accredited/SCIF facilities at least 2-3 days per week.

Requirements

• Design, maintain, and improve secure CI/CD pipelines using GitHub Actions and Azure DevOps across multiple repositories and environments, including disconnected or air-gapped deployments.
• Build and maintain secure containerized applications for Kubernetes platforms such as AKS and OpenShift.
• Integrate automated security and compliance checks into development pipelines, ensuring critical findings are resolved before release.
• Implement secure artifact management practices, including software bills of materials (SBOMs), artifact signing, provenance, and controlled promotion between environments.
• Manage secrets and environment-specific configuration using approved vault and configuration-management solutions.
• Automate compliance evidence, configuration monitoring, audit logging, and security reporting in support of RMF and ATO requirements.
• Improve application and pipeline observability, reliability, and operational readiness through logging, monitoring, testing, and incident-response practices.
• Develop and validate backup, recovery, and disaster-recovery procedures with documented recovery objectives.
• Partner with developers, cybersecurity engineers, and operations teams to resolve vulnerabilities, improve delivery processes, and support production deployments.
• Create clear technical documentation, operational runbooks, and customer-handoff materials.

Required Qualifications

• 5+ years of hands-on DevOps or DevSecOps engineering experience, including responsibility for production CI/CD pipelines in a regulated or security-sensitive environment.
• Strong working knowledge of GitHub Enterprise, including GitHub Actions, repository and organization configuration, access controls, branch protection or rulesets, reusable workflows, and self-hosted runners.
• Experience designing and maintaining CI/CD pipelines in GitHub Enterprise and Azure DevOps across multiple repositories and environments.
• Experience building secure container images using hardened base images, multi-stage builds, vulnerability scanning, minimal dependencies, and non-root runtimes.
• Production experience with Kubernetes platforms such as AKS or OpenShift, including deployment configuration, health probes, secrets integration, and admission-policy requirements.
• Experience integrating automated security controls into CI/CD pipelines, including source-code, dependency, secret, container, and infrastructure-as-code scanning.
• Working knowledge of secure software supply-chain practices, including SBOM generation, artifact signing, provenance, and controlled artifact promotion.
• Proficiency with Infrastructure as Code using Terraform, Bicep/ARM, or a comparable technology.
• Experience with Azure services such as Key Vault, managed identities, Azure Policy, Azure Monitor, Log Analytics, or Microsoft Sentinel.
• Strong Linux fundamentals and command-line troubleshooting skills.
• Familiarity with secrets management, centralized logging, monitoring, backup, recovery, and disaster-recovery practices.
• Excellent troubleshooting, documentation, and stakeholder communication skills.
• Ability to work independently and manage priorities across multiple concurrent engagements.
• DoD 8570/8140 IAT Level II certification, with Security+ CE or an accepted equivalent.
• Active Department of Defense Top Secret clearance. Candidates must maintain their clearance and be SCI-eligible and willing to be read in.

Preferred Qualifications

• Active TS/SCI clearance.
• Experience with GitHub Enterprise Server in disconnected or air-gapped environments.
• Experience delivering solutions in Azure Government or DoD Impact Level 5 or higher environments.
• Familiarity with RMF, NIST SP 800-53, DISA STIGs, and the DoD Cloud Computing SRG.
• Experience with DoD Iron Bank, Platform One, or comparable hardened-container programs.
• Experience supporting an RMF authorization, continuous ATO initiative, or automated compliance-evidence pipeline.
• Experience transferring software artifacts into air-gapped or cross-domain environments.
• Experience with Kubernetes policy tools such as OPA/Gatekeeper or Kyverno.
• Experience implementing artifact attestation, signing, provenance, or software supply-chain policy enforcement.
• Experience with production secrets rotation, SIEM integration, audit-log retention, and tested disaster-recovery procedures.
• CISSP, CASP+, or another advanced security certification.

HyerTek offers a comprehensive benefits package, including:

• Medical, dental, and vision insurance
• 401(k) with employer contribution
• Paid time off (PTO) and company holidays
• Professional development and certification support
• Employee assistance program (EAP)
• Life and disability insurance

Clearance & Work Authorization
This position requires U.S. citizenship and an active TS clearance with the Department of Defense. TS/SCI is strongly preferred, and candidates holding TS must be SCI-eligible; the work is expected to require SCI access, and HyerTek will sponsor the read-in for an otherwise qualified candidate. Candidates must be authorized to work in the United States without the need for employment-based visa sponsorship now or in the future.

Salary Range

$150,000 – $190,000 annually, depending on experience and clearance status.

Equal Employment Opportunity (EEO)

HyerTek is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, age, or any other protected status.