DevSecOps & Security Engineer: CI/CD, Cloud & RMF

Zantech; Arlington (VA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive compensation

Strong benefits

Vacation package

Job summary

Zantech, a dynamic Woman Owned Small Business, seeks a DevSecOps/Security Engineer for an on-site role in Arlington, VA. You will lead automation, CI/CD, and security posture of cloud infrastructure, supporting continuous ATO under RMF and eMASS artifact automation.

Requires 5+ years in DevSecOps, RMF for DoD/federal systems, and cloud-IaC automation with Terraform or CloudFormation. Certifications such as Security+ / CySA+ and CKs/CISSP are highly desirable.

Qualifications

• Bachelor's degree in computer science, engineering, or equivalent with 5+ years of experience OR AA with 7+ years of experience.
• DoD RMF experience including DISA STIGs, vulnerability assessments, and patching/remediation is required.
• Experience automating cloud infrastructure (AWS, Azure) using IaC (Terraform or CloudFormation).
• Strong CI/CD and secure deployment automation skills are required.

Responsibilities

• Build and maintain secure, automated CI/CD pipelines with zero-downtime deployments.
• Automate infrastructure provisioning and configuration management via Infrastructure as Code.
• Support RMF processes: SSP, SAR, and POA&M development with continuous monitoring.
• Apply and automate DISA STIGs; run vulnerability scanning and remediation.
• Integrate SAST/DAST into CI/CD and produce auto-generated compliance artifacts for eMASS.

Skills

CI/CD pipelines

Automation

RMF experience

Cloud provisioning

Jenkins

GitLab CI/CD

Ansible

Terraform

CloudFormation

Docker

Kubernetes

SAST/DAST

DISA STIGs

Education

Bachelor's degree in CS/Engineering

AA with 7+ years of experience

DoD 8140.03 qualification

CISSP

CKS

AWS/Azure security specialty

Bachelor's degree in Cybersecurity

Tools

Terraform

CloudFormation

Ansible

Jenkins

GitLab CI/CD

Docker

Kubernetes

Nessus

OpenSCAP

Splunk

ELK Stack

eMASS

Job description

Zantech, a dynamic Woman Owned Small Business, seeks a DevSecOps/Security Engineer for an on-site role in Arlington, VA. You will lead automation, CI/CD, and security posture of cloud infrastructure, supporting continuous ATO under RMF and eMASS artifact automation.

Requires 5+ years in DevSecOps, RMF for DoD/federal systems, and cloud-IaC automation with Terraform or CloudFormation. Certifications such as Security+ / CySA+ and CKs/CISSP are highly desirable.