Senior DevSecOps / cATO Engineer

Chameleon Integrated Services; Linthicum (MD); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Vision plan

401K with company match

Life insurance

Disability insurance

Training allowance

PTO

Job summary

Chameleon Integrated Services seeks a Senior DevSecOps / cATO Engineer to design, build, and operate advanced CI/CD pipelines across both unclassified and classified environments. The role emphasizes security left, automated guardrails, and rapid transition to continuous ATO/cATO models.

The candidate will bridge software development, IT operations, and cybersecurity compliance. Responsibilities include building secure pipelines, IaC/CaC, automation of STIGs, and supporting system accreditations

Qualifications

• Experience building and operating automated CI/CD pipelines.
• Familiarity with Infrastructure as Code (Terraform) and Configuration as Code (Ansible).
• Strong containerization/orchestration knowledge (e.g., Kubernetes).
• Solid understanding of RMF, eMASS integration, and ATO/cATO artifacts.

Responsibilities

• Engineer, maintain, and optimize secure CI/CD pipelines across sprints.
• Implement IaC/CaC for infrastructure and configurations.
• Automate security controls, guardrails, and STIGs in deployment pipelines.
• Produce evidence and documentation for system accreditations and cATO workflows.
• Conduct software integration, automated testing, vulnerability scanning, and deployments.
• Provide incident response support with pipeline-driven remediation.
• Research and assess Agentic AI integrations to improve automation.

Skills

CI/CD pipelines

IaC

CaC automation

Containers & orchestration

RMF & ATO/cATO

Vulnerability scanning

DoD 8140/8570 cert

Tools

Terraform

Ansible

Kubernetes

Job description

We are a growing information technology company that offers its employees a culture of success, the chance to work on revolutionary federal IT infrastructure, and the opportunity to grow alongside cutting-edge technology that is reshaping the industry. We are seeking forward-thinking candidates that have strong experience in operational support and can help take to the next level in a proactive stance.

Chameleon Integrated Services has expertise in operations management, quality systems, data operations and cybersecurity. We secure some of the most sensitive data for the Department of Defense and for other U.S. federal government agencies. We are known for the great care we take with clients and employees, and we believe in promoting from within.

We offer a Full Benefits package including:

• Competitive Employee Health Insurance options including dental
• 100% company paid vision plan
• 401K plan with generous company match and no vesting period
• 100% company paid life insurance
• 100% company paid long and short-term disability insurance
• Training allowance
• PTO and more

Senior DevSecOps / cATO Engineer (Technical Specialist)

Location: Linthicum Heights, MD
Employment Type: Full-Time / Contingent Upon Contract Award
Clearance Required: TS/SCI clearance eligibility preferred;
U.S. Citizenship required
Required Certification: DoD 8140/8570 baseline certification appropriate for administrative or privileged system/network access (e.g., Security+, CISSP, or equivalent)

Position Note

Chameleon Integrated Services is actively bidding on a proposal to provide Cyberspace Operations and Development for the Enterprise (CODE) services under the DC3 Technical, Analytical, and Business Operations (TABO) requirement. This position is contingent upon contract award.

Position Overview

Chameleon Integrated Services is seeking a Senior DevSecOps / cATO Engineer to support unclassified and classified environments across the CODE footprint. This role requires a hands-on technical expert capable of designing, building, and operating advanced Continuous Integration/Continuous Deployment (CI/CD) pipelines with automated security guardrails.

The ideal candidate will bridge the gap between software development, IT operations, and cybersecurity compliance, focusing on shifting security to the left and accelerating the transition from static Authorization to Operate (ATO) models to Continuous ATO (cATO) frameworks.

Responsibilities

• Engineer, maintain, and optimize secure CI/CD pipelines as part of regular development sprints.
• Implement and manage infrastructure utilizing Infrastructure as Code (IaC) and Configuration as Code (CaC) technologies.
• Automate security controls, compliance guardrails, and Security Technical Implementation Guides (STIGs) directly into the deployment pipelines.
• Generate technical evidence, system documentation, and continuous monitoring data necessary to support system accreditations and cATO workflows.
• Conduct software integration, automated testing, vulnerability scanning (SAST/DAST/dependency scanning), patching, and deployment validation.
• Provide advanced technical support for incident response activities by pulling system data, analyzing logs, and implementing pipeline-driven corrective actions.
• Research, test, and recommend the integration of Agentic AI and other advanced capabilities into automated workflows to improve speed and efficiency.

Required Skills & Qualifications

• Demonstrated hands-on engineering experience running automated CI/CD pipelines.
• Proficient with Infrastructure as Code (IaC) tools (e.g., Terraform) and Configuration as Code (CaC) automation (e.g., Ansible).
• Strong experience with containerization and container orchestration technologies.
• Solid understanding of the Risk Management Framework (RMF), eMASS integration, and generating engineering artifacts for ATO/cATO.
• Experience implementing automated code and dependency vulnerability scanning.
• Must hold a compliant DoD 8140/8570 baseline certification before being granted administrative or privileged system access.

Preferred Experience

• Experience working inside a DoD software factory environment or a classified defense DevSecOps ecosystem.
• Active TS/SCI clearance.

“We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status”

Texting Privacy Policy

• Message type: Informational; you will receive text messages regarding your application and potentially regarding interview scheduling.
• No mobile information will be shared with third parties/affiliates for marketing/promotional purposes.
• Message frequency will vary depending on the application process.Msg & data rates may apply.
• OPT out at any time by texting "Stop".