Senior DevSecOps / cATO Engineer

chameleonintegratedservices; Linthicum (MD); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Vision plan

401K

Life insurance

Disability insurance

Training allowance

PTO

Job summary

Chameleon Integrated Services seeks a Senior DevSecOps / cATO Engineer to design, build, and operate secure CI/CD pipelines across unclassified and classified environments. You will bridge software development, IT operations, and cybersecurity to push security left and accelerate ATO maturity toward cATO.

Citizenship and 8140/8570 baseline certification readiness are required. Location is Linthicum Heights, MD with full-time contingent work on contract award.

Qualifications

• Hands-on engineering experience with automated CI/CD pipelines.
• IaC tools like Terraform and CaC automation with Ansible experience.
• Strong containerization and orchestration experience.
• Understanding of RMF, eMASS integration and ATO/cATO artifacts.
• Experience with automated code and dependency vulnerability scanning.
• Must hold a compliant DoD 8140/8570 baseline certification before privileged access.

Responsibilities

• Engineer, maintain, and optimize secure CI/CD pipelines during sprints.
• Implement and manage infrastructure using IaC and CaC technologies.
• Automate security controls, guardrails, and STIGs in deployment pipelines.
• Generate evidence, docs, and monitoring data to support accreditations and cATO workflows.
• Perform software integration, automated testing, vulnerability scanning, patching, and deployment validation.
• Provide advanced technical support for incident response with data analysis and corrective actions.
• Research and test Agentic AI integrations to improve automation workflows.

Skills

CI/CD pipelines

IaC

CaC

Containers

Kubernetes

RMF/eMASS/ATO/cATO

Vulnerability scanning

DoD 8140/8570

Incident response

Tools

Terraform

Ansible

Job description

We are a growing information technology company that offers its employees a culture of success, the chance to work on revolutionary federal IT infrastructure, and the opportunity to grow alongside cutting-edge technology that is reshaping the industry. We are seeking forward-thinking candidates that have strong experience in operational support and can help take to the next level in a proactive stance.

Chameleon Integrated Services has expertise in operations management, quality systems, data operations and cybersecurity. We secure some of the most sensitive data for the Department of Defense and for other U.S. federal government agencies. We are known for the great care we take with clients and employees, and we believe in promoting from within.

We offer a Full Benefits package including:

• Competitive Employee Health Insurance options including dental
• 100% company paid vision plan
• 401K plan with generous company match and no vesting period
• 100% company paid life insurance
• 100% company paid long and short-term disability insurance
• Training allowance
• PTO and more

Senior DevSecOps / cATO Engineer (Technical Specialist)

Location: Linthicum Heights, MD

Employment Type: Full-Time / Contingent Upon Contract Award

Clearance Required: TS/SCI clearance eligibility preferred;

U.S. Citizenship required

Required Certification: DoD 8140/8570 baseline certification appropriate for administrative or privileged system/network access (e.g., Security+, CISSP, or equivalent)

Position Note

Chameleon Integrated Services is actively bidding on a proposal to provide Cyberspace Operations and Development for the Enterprise (CODE) services under the DC3 Technical, Analytical, and Business Operations (TABO) requirement. This position is contingent upon contract award.

Position Overview

Chameleon Integrated Services is seeking a Senior DevSecOps / cATO Engineer to support unclassified and classified environments across the CODE footprint. This role requires a hands‑on technical expert capable of designing, building, and operating advanced Continuous Integration/Continuous Deployment (CI/CD) pipelines with automated security guardrails.

The ideal candidate will bridge the gap between software development, IT operations, and cybersecurity compliance, focusing on shifting security to the left and accelerating the transition from static Authorization to Operate (ATO) models to Continuous ATO (cATO) frameworks.

Responsibilities

• Engineer, maintain, and optimize secure CI/CD pipelines as part of regular development sprints.
• Implement and manage infrastructure utilizing Infrastructure as Code (IaC) and Configuration as Code (CaC) technologies.
• Automate security controls, compliance guardrails, and Security Technical Implementation Guides (STIGs) directly into the deployment pipelines.
• Generate technical evidence, system documentation, and continuous monitoring data necessary to support system accreditations and cATO workflows.
• Conduct software integration, automated testing, vulnerability scanning (SAST/DAST/dependency scanning), patching, and deployment validation.
• Provide advanced technical support for incident response activities by pulling system data, analyzing logs, and implementing pipeline-driven corrective actions.
• Research, test, and recommend the integration of Agentic AI and other advanced capabilities into automated workflows to improve speed and efficiency.

Required Skills & Qualifications

• Demonstrated hands‑on engineering experience running automated CI/CD pipelines.
• Proficient with Infrastructure as Code (IaC) tools (e.g., Terraform) and Configuration as Code (CaC) automation (e.g., Ansible).
• Strong experience with containerization and container orchestration technologies.
• Solid understanding of the Risk Management Framework (RMF), eMASS integration, and generating engineering artifacts for ATO/cATO.
• Experience implementing automated code and dependency vulnerability scanning.
• Must hold a compliant DoD 8140/8570 baseline certification before being granted administrative or privileged system access.

Preferred Experience

• Experience working inside a DoD software factory environment or a classified defense DevSecOps ecosystem.

• Active TS/SCI clearance.

“We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status”

Texting Privacy Policy

• Message type: Informational; you will receive text messages regarding your application and potentially regarding interview scheduling.
• No mobile information will be shared with third parties/affiliates for marketing/promotional purposes.
• Message frequency will vary depending on the application process. Msg & data rates may apply.
• OPT out at any time by texting "Stop".