Senior DevSecOps Engineer

Parsons; Boulder (CO); On-site; USD 150,000 - 210,000; Full time

Job summary

Parsons in Boulder, CO is seeking a Senior DevSecOps Engineer to lead secure software and infrastructure delivery across multiple enclaves. You will architect and maintain secure cloud and on-prem environments with IaC tools, build automated CI/CD pipelines with integrated security controls, and enforce secure coding practices throughout the SDLC.

Expert Linux administration (RHEL) and hands-on experience with Docker/Kubernetes, along with vulnerability management and RMF A&A support, are

Qualifications

• Active DoD Secret clearance with TS/SCI eligibility.
• 10+ years of professional experience; related education counts.
• Bachelor's degree or equivalent experience.
• Experience in defense, space, or aerospace environments; DoD DevSecOps familiarity.
• Strong Linux (RHEL) administration and scripting (Bash/Python).

Responsibilities

• Lead DevSecOps initiatives across multiple enclaves and projects as primary security contact.
• Architect, implement, and maintain secure cloud and on-prem environments using IaC tools.
• Design, build, and operate automated CI/CD pipelines with integrated security controls.
• Manage container workloads with Docker and Kubernetes (RKE2/OpenShift/Rancher).
• Provide expert Linux administration and issue troubleshooting in mission-critical environments.
• Integrate security into SDLC; mentor teams on DevSecOps and OWASP Top 10.

Skills

DoD DevSecOps

Agile methodologies

NIST controls

OWASP Top 10

Git workflows

Bash/Python scripting

Java/C#/Go

Education

Bachelor's degree

Tools

Terraform

Ansible

CloudFormation

Pulumi

GitLab CI

GitHub Actions

Azure DevOps

Jenkins

Docker

Kubernetes

RKE2

OpenShift

Rancher

Helm

Kustomize

Job description

In a world of possibilities, pursue one with endless opportunities. Imagine Next! At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what's possible.

Job Description:

Parsons is looking for a sharp Senior DevSecOps Engineer to join our growing team in Boulder, CO!

What You'll Be Doing :

• Lead DevSecOps initiatives across multiple enclaves and projects, serving as a primary technical point of contact for secure software and infrastructure delivery
• Architect, implement, and maintain secure cloud and on-prem environments using Infrastructure as Code toolsets such as Terraform, Ansible, CloudFormation, or Pulumi
• Design, build, and operate automated CI/CD pipelines (e.g., GitLab CI, GitHub Actions, Azure DevOps, Jenkins) with integrated security controls including SAST, DAST, SCA, container image scanning, and secret management
• Implement, harden, and manage containerized workloads using Docker and Kubernetes (including RKE2, OpenShift, or Rancher), leveraging Helm, Kustomize, and umbrella charts to deploy and manage complex, multi-service systems
• Provide expert Linux systems administration on Red Hat Enterprise Linux , including troubleshooting issues across storage, operating systems, applications, and networks in classified or mission-critical environments
• Integrate security into the SDLC by enforcing secure coding practices, performing code and pipeline reviews, and mentoring developers on DevSecOps and application security principles (including OWASP Top 10)
• Establish and maintain observability capabilities (logging, metrics, tracing, alerting) to support reliability, incident response, and performance monitoring for mission systems
• Identify, prioritize, and drive remediation of vulnerabilities across applications, containers, hosts, and infrastructure, in alignment with NIST controls and DoD DevSecOps guidance
• Implement and maintain DAST and SAST tools in coordination with ISSOs, system security engineers, and development teams to support RMF Assessment and Authorization (A&A) efforts and continuous monitoring
• Utilize and manage binary registries (e.g., Artifactory, Harbor, Docker Registry, Nexus) and package repositories in secure environments, ensuring compliance with program policies and security baselines
• Support and enhance compliance- and policy-as-code solutions (e.g., OPA, Conftest, Checkov) to enforce security baselines, configuration standards, and deployment guardrails across Kubernetes, cloud, and IaC artifacts
• Collaborate with systems engineering, cybersecurity, operations, and vendor teams to ensure software and infrastructure designs meet security, performance, availability, and accreditation requirements
• Support and contribute to program documentation and security artifacts, including architecture and deployment documentation, security plans, DevSecOps process documentation, and material for technical reviews and readiness events
• Work with Product Owners and Scrum Masters to translate security and DevSecOps requirements into actionable user stories and tasks; support Agile ceremonies and iterative delivery of secure capabilities
• Drive continuous improvement in automation, tooling, and processes to increase deployment frequency, reduce change failure rates, and strengthen the overall security posture of the program

What Required Skills You'll Bring :

• Active DoD Secret clearance , with eligibility and willingness to obtain TS/SCI
• 10+ years of professional experience, with additional education able to count towards total years of experience. Potential flexibility pending Customer approval.
• Bachelor's degree, or additional years of experience in lieu of a degree
• Professional software/DevSecOps experience in mission-critical defense, space, or aerospace environments; familiarity with DoD DevSecOps, Agile, NIST controls, and OWASP Top 10
• Strong Linux (RHEL) administration and scripting skills (Bash, Python) (Bash, Python) , including system hardening, automation, and troubleshooting across storage, OS, application, and network layers
• Proficiency in at least one major programming language (e.g., Java, C#, Python, Go, JavaScript/TypeScript) and associated frameworks, plus Git-based workflows and collaboration tools
• Hands-on