DevSecOps / Security Engineer

Zantech; Arlington (VA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive compensation

Strong benefits

Vacation package

Job summary

Zantech, a dynamic Woman Owned Small Business, seeks a DevSecOps/Security Engineer for an on-site role in Arlington, VA. You will lead automation, CI/CD, and security posture of cloud infrastructure, supporting continuous ATO under RMF and eMASS artifact automation.

Requires 5+ years in DevSecOps, RMF for DoD/federal systems, and cloud-IaC automation with Terraform or CloudFormation. Certifications such as Security+ / CySA+ and CKs/CISSP are highly desirable.

Qualifications

• Bachelor's degree in computer science, engineering, or equivalent with 5+ years of experience OR AA with 7+ years of experience.
• DoD RMF experience including DISA STIGs, vulnerability assessments, and patching/remediation is required.
• Experience automating cloud infrastructure (AWS, Azure) using IaC (Terraform or CloudFormation).
• Strong CI/CD and secure deployment automation skills are required.

Responsibilities

• Build and maintain secure, automated CI/CD pipelines with zero-downtime deployments.
• Automate infrastructure provisioning and configuration management via Infrastructure as Code.
• Support RMF processes: SSP, SAR, and POA&M development with continuous monitoring.
• Apply and automate DISA STIGs; run vulnerability scanning and remediation.
• Integrate SAST/DAST into CI/CD and produce auto-generated compliance artifacts for eMASS.

Skills

CI/CD pipelines

Automation

RMF experience

Cloud provisioning

Jenkins

GitLab CI/CD

Ansible

Terraform

CloudFormation

Docker

Kubernetes

SAST/DAST

DISA STIGs

Education

Bachelor's degree in CS/Engineering

AA with 7+ years of experience

DoD 8140.03 qualification

CISSP

CKS

AWS/Azure security specialty

Bachelor's degree in Cybersecurity

Tools

Terraform

CloudFormation

Ansible

Jenkins

GitLab CI/CD

Docker

Kubernetes

Nessus

OpenSCAP

Splunk

ELK Stack

eMASS

Job description

Are you looking for your next challenge? Are you ready to work with a performance-based small company? At Zantech, we are a dynamic Woman Owned Small Business focused on providing complex, mission-focused solutions with a proven track record of outstanding customer performance and high employee satisfaction. We would love to talk with you regarding the next step in your career. Come join our team!

Zantech is looking for a talented DevSecOps / Security Engineer to contribute to the success of our upcoming Technical Infrastructure and Platform Support project for an On-Site role based out of Arlington, VA.

The DevSecOps / Security Engineer will play a crucial role in providing:

• Technical Infrastructure and Platform Support
• Cybersecurity and Information Assurance (RMF, continuous ATO, Compliance-as-Code)

The DevSecOps / Security Engineer serves as the lead technical engineer for automation, CI/CD, and security posture of the cloud infrastructure, directly executing Technical Infrastructure and Platform Support requirements and supporting continuous Authority to Operate (ATO) under the DoD Risk Management Framework.

Responsibilities include, but will not be limited to:

• Build and maintain secure, automated CI/CD pipelines and zero-downtime deployment processes
• Automate infrastructure provisioning and configuration management via Infrastructure as Code
• Support the RMF process: System Security Plan, Security Assessment Report, and POA&M development and continuous monitoring
• Apply and automate DISA STIGs; run vulnerability scanning and manage remediation
• Integrate SAST/DAST testing and auto-generate compliance-as-code artifacts (e.g., Ports/Protocols/Services, topology diagrams) for eMASS

Required Experience or Knowledge of the following technologies/functions:

• 5 years in DevSecOps, including designing, implementing, and maintaining CI/CD pipelines and automating software deployment (Jenkins, GitLab CI/CD, or Ansible)
• 5 years supporting the Risk Management Framework (RMF) for DoD or federal systems, including DISA STIGs, vulnerability assessments, and patching/remediation
• 5 years automating cloud infrastructure and platform provisioning (AWS, Azure) using Infrastructure as Code (Terraform or CloudFormation).
• Skills Required:
• CI/CD pipeline design and secure software deployment automation
• Infrastructure as Code (Terraform, Ansible, CloudFormation)
• Security scanning and monitoring/logging integration (Nessus, OpenSCAP, Splunk, ELK Stack)
• Containerization and orchestration in microservices architectures (Docker, Kubernetes)
• SAST/DAST integration directly into the CI/CD pipeline
• RMF process support, DISA STIG application, and continuous ATO / eMASS artifact automation

Required Education/Certifications:

• Education Required:
• Bachelor's degree in computer science, engineering, or equivalent, and 5+ years of experience OR
• AA with 7+ years of experience is an accepted substitute
• Education Preferred:
• Bachelor's degree in Computer Science, Cybersecurity, or a related field
• Certifications Required:
• Current DoDM 8140.03-qualifying certification for the assigned cyberspace work role, e.g., Security+ or CySA+)
• Certifications Preferred:
• CISSP, AWS/Azure security specialty certification, Certified Kubernetes Security Specialist (CKS)

Required Security Clearance:

• US Citizenship and the ability to obtain and maintain an active Secret or higher clearance, per contract requirements.

“Outstanding Performance…Always!”

Our corporate motto represents our commitment to build long-term relationships with both our clients and our employees by providing the highest quality service in everything we do. We strive for excellence for our clients and for each other. We embrace the opportunity to hire individuals with new talents and fresh perspectives. Zantech offers competitive compensation, strong benefits, and a vacation package, as well as a fast-paced and exciting work environment. Come join our team!