Secure DevSecOps Engineer - Platform & CI/CD Expert

OpenTalent; Fort Meade (MD); On-site; USD 120,000 - 180,000; Full time

Job summary

OpenTalent in Maryland Fort Meade seeks a dynamic DevSecOps Engineer / Platform Application SME to securely deploy, integrate, and operate containerized apps on the platform. You will ensure applications from other teams can be onboarded, CI/CD and GitOps workflows are secure, and operations remain compliant across the lifecycle.

You will apply DevSecOps across deployment lifecycles, integrating security controls, automated testing, vulnerability management, and SBOMs.

Qualifications

• Experience securing containerized deployments and CI/CD pipelines.
• Knowledge of RBAC, secrets management, and secure config.
• Experience with SBOMs and software supply chain security.
• Proven ability to onboard applications to shared platform securely.

Responsibilities

• Containerize and package applications for deployment using Docker/Podman and Helm/Kustomize.
• Deploy and operate DNS services within containerized environments.
• Onboard applications securely to the shared platform across teams.
• Implement CI/CD and GitOps pipelines with Jenkins, GitLab CI, Argo CD.
• Integrate automated security controls (SAST/DAST/SCA) into pipelines.
• Assist with software supply-chain practices and SBOM management.
• Enforce container/Kubernetes/OpenShift security practices and RBAC.

Skills

Containerization

CI/CD pipelines

DevSecOps

Kubernetes/OpenShift security

RBAC & Secrets Management

Security testing (SAST/DAST/SCA)

SBOMs

Tools

Docker

Podman

OpenShift

Helm

Kustomize

Argo CD

Jenkins

GitLab CI

Job description

OpenTalent in Maryland Fort Meade seeks a dynamic DevSecOps Engineer / Platform Application SME to securely deploy, integrate, and operate containerized apps on the platform. You will ensure applications from other teams can be onboarded, CI/CD and GitOps workflows are secure, and operations remain compliant across the lifecycle.

You will apply DevSecOps across deployment lifecycles, integrating security controls, automated testing, vulnerability management, and SBOMs.