DoD-Ready DevSecOps Engineer - Cloud & Security

NetImpact Strategies Inc.; Herndon (VA); On-site; USD 120,000 - 165,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Paid time off (PTO)

Wellness leave

Pet Insurance

Tuition reimbursement

Internal training programs

Job summary

NetImpact Strategies is seeking a DevSecOps Engineer to support secure cloud infrastructure within a Department of Defense environment. This hands-on role combines DevSecOps with cybersecurity and RMF support to produce the evidence needed for Authorization to Operate.

The ideal candidate will partner with engineering and cybersecurity teams to implement secure solutions, develop pipelines, and maintain SSPs, POA&Ms, and documentation for RMF/ATO processes.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field.
• Four or more years of experience in DevOps, DevSecOps, cloud engineering, or a related discipline.
• Hands-on experience with Linux, Docker, Kubernetes, Git, and AWS, Microsoft Azure, or another major cloud platform.
• Experience developing CI/CD pipelines and implementing Infrastructure as Code using Terraform, CloudFormation, or comparable tools.
• Knowledge of cloud networking, identity and access management, secrets management, encryption, monitoring, vulnerability management, patching, and system hardening.
• Familiarity with DoD RMF, the ATO lifecycle, NIST SP 800-53, DISA STIGs, security-control documentation, and POA&Ms.
• Strong troubleshooting, technical-writing, communication, and collaboration skills.

Responsibilities

• Design, deploy, maintain, and troubleshoot secure cloud infrastructure and applications across development, testing, and production environments.
• Administer Docker and Kubernetes environments, including deployments, networking, configuration, storage, scaling, and upgrades.
• Develop and maintain CI/CD pipelines that automate application builds, testing, security scanning, and deployment.
• Implement Infrastructure as Code using Terraform, CloudFormation, Ansible, or comparable technologies.
• Administer Linux systems and troubleshoot issues across applications, containers, networks, operating systems, and cloud services.
• Implement monitoring, logging, alerting, backup, recovery, and operational automation capabilities.
• Apply security baselines, DISA STIGs, patching requirements, least-privilege access, and secure configuration practices.
• Identify, prioritize, remediate, and document vulnerabilities and security findings.
• Support DoD RMF and ATO activities by developing and maintaining SSPs, POAMs, architecture diagrams, inventories, data flows, PPSM documentation, and remediation evidence.
• Work with ISSOs, ISSMs, engineers, developers, and assessors to document NIST SP 800-53 control implementations and maintain accurate authorization packages.

Skills

Linux

Docker

Kubernetes

Git

AWS

Azure

Education

Bachelor’s degree

Tools

Terraform

CloudFormation

Ansible

Job description

NetImpact Strategies is seeking a DevSecOps Engineer to support secure cloud infrastructure within a Department of Defense environment. This hands-on role combines DevSecOps with cybersecurity and RMF support to produce the evidence needed for Authorization to Operate.

The ideal candidate will partner with engineering and cybersecurity teams to implement secure solutions, develop pipelines, and maintain SSPs, POA&Ms, and documentation for RMF/ATO processes.