DoD DevSecOps Engineer — Security Automation & IaC

GBL Systems Corporation; Camarillo (CA); Hybrid; USD 67,275 - 115,244; Full time

Benefits offered by this job

Competitive salary

401(k) retirement plan

Group medical insurance

Dental/Vision Insurance

Life insurance

AD&D coverage

Paid holiday and PTO

Hybrid or remote eligible

Job summary

GBL Systems Corporation in Camarillo, CA, is seeking a Software Engineer I-II - DevSecOps Engineer to join a DoD-focused team. The role combines software development, security tooling, and automation across CI/CD pipelines, with emphasis on RMF, STIGs, and secure cloud environments.

You will design and deploy custom DevSecOps tooling, integrate SAST/DAST, and develop IaC templates, dashboards, and APIs to support audit readiness and incident response. U.S.

Qualifications

• U.S. Citizenship and active DoD Secret clearance (Top Secret preferred).
• Bachelor’s degree in Computer Science, Engineering, Cybersecurity, or related field—or equivalent practical experience.
• Minimum 3–5 years supporting DoD or federal IT programs with DevOps or cybersecurity automation.
• Experience designing secure CI/CD pipelines using GitLab CI/CD, Jenkins, GitHub Actions, or similar.
• Proficient in at least one programming/scripting language (e.g., Python, Bash, PowerShell).
• Familiarity with DoD RMF and security documentation.
• Strong understanding of DISA STIGs, ACAS/Nessus scanning, SCAP compliance, and audit traceability.
• Experience with secure cloud environments, preferably AWS GovCloud, Azure Government, or milCloud.

Responsibilities

• Design, develop, and deploy custom DevSecOps tooling to automate security testing, compliance validation, and infrastructure deployment in accordance with DoD policies.
• Integrate static code analysis (SAST), dynamic analysis (DAST), container security, SBOM generation, and dependency scanning into secure CI/CD workflows.
• Automate enforcement and reporting of compliance controls such as DISA STIGs, NIST 800-53, and DoD Cloud Computing SRG.
• Support and contribute to the RMF process, including security documentation, vulnerability scanning, POA&Ms, and achieving/maintaining Authority to Operate (ATO).
• Develop Infrastructure-as-Code (IaC) templates and pipelines (e.g., Terraform, Ansible, CloudFormation) with embedded security guardrails.
• Collaborate with cross-functional teams, including system administrators, software developers, ISSOs, and SCA teams, to ensure continuous security integration.
• Monitor pipeline activity and infrastructure logs for anomalous behavior, threats, or misconfigurations, and respond to incidents as needed.
• Develop dashboards, scripts, and APIs to support internal security workflows, audit readiness, and data visualization for leadership.
• Stay informed on the latest DoD cybersecurity mandates, emerging threats, and approved tools/technologies under DoD policy and FedRAMP.

Skills

Python

CI/CD pipelines

SAST/DAST

RMF compliance

DoD cloud security

Education

Bachelor's degree in CS/Engineering/Cybersecurity

Tools

GitLab CI/CD

Jenkins

GitHub Actions

Terraform

Ansible

CloudFormation

Job description

GBL Systems Corporation in Camarillo, CA, is seeking a Software Engineer I-II - DevSecOps Engineer to join a DoD-focused team. The role combines software development, security tooling, and automation across CI/CD pipelines, with emphasis on RMF, STIGs, and secure cloud environments.

You will design and deploy custom DevSecOps tooling, integrate SAST/DAST, and develop IaC templates, dashboards, and APIs to support audit readiness and incident response. U.S.