Senior DevSecOps Engineer

Omni Federal; Maryland; Remote; USD 140,000 - 210,000; Full time

Job summary

Omni Federal is seeking a Senior DevSecOps Engineer to design and sustain automated cloud infrastructure for DoD/IC-scale systems. You will manage IaC, CI/CD, security controls, and remediation across large AWS/Azure environments, with remote work and quarterly travel.

Candidate must hold an active Top Secret clearance and have a strong background in Linux/Windows, container tech, and automation scripting to support enterprise applications and security objectives.

Qualifications

• Active Top Secret clearance is required.
• 6+ years of Cloud and DevSecOps experience in large AWS/Azure environments.
• Experience with IaC, CI/CD, and cloud security controls.
• Ability to translate cybersecurity risks into actionable guidance.
• Bachelor’s degree in a related field.

Responsibilities

• Design, implement, and sustain automated cloud infrastructure for DoD/IC-scale environments.
• Maintain IaC, configuration management, automated testing, and cloud monitoring.
• Administer cloud-native services and integrate security controls and vulnerability remediation.
• Automate routine tasks, provisioning, access controls, backup and recovery, and document runbooks.

Skills

CI/CD pipelines

Scripting (Bash, Python, PowerShell)

Infrastructure as Code

Container orchestration

Risk translation to action

Education

Bachelor’s Degree

Tools

Terraform

CloudFormation

AWS

Azure

GitLab CI/CD

Ansible

Docker

Kubernetes

Job description

Job Title

Senior DevSecOps Engineer

Location

Remote + Quarterly Travel

Security Clearance

Active Top-Secret

Values

We question. We listen. We adapt.

Be honest. Be pragmatic.

Company Overview

Omni Federal, founded in 2017 and headquartered in Washington, DC, is a highly specialized software solutions provider with a robust presence in key locations across the United States, including Boston, MA, Colorado Springs, CO, San Antonio, TX, and St. Louis, MO. Born out of the Department of Defense's software factory ecosystem, Omni has rapidly distinguished itself by delivering both mission-critical and enterprise solutions that enhance the technological capabilities of the federal government. With a focus on areas such as Command and Control, Cybersecurity, Space, Geospatial, and Modeling & Simulation, Omni leverages cutting‑edge commercial technology tailored to government objectives, improving mission performance and delivering transformative outcomes for the Department of Defense (DoD), Intelligence Community (IC), and their end-users. The company's innovative approach is backed by its Omni Labs and SBIR Innovation centers, where they develop advanced platforms and tools indata mesh, secure connectivity, and intelligent automation.

Why Omni?

• Environment of Autonomy
• Innovative Commercial Approach
• People over process

We are seeking an experienced Senior DevSecOps Engineer to design, implement, and sustain automated cloud infrastructure supporting enterprise applications and services for the Defense Counterintelligence and Security Agency (DCSA). This position will include maintaining Infrastructure-as-Code (IaC), configuration management, automated testing, administering cloud native services, and integrating security controls and vulnerability remediation across a large AWS cloud environment. This position may also involve automating routine operational tasks using scripting and programming languages, supporting environment provisioning, access controls, backup and recovery activities, and maintaining technical documentation (e.g., runbooks).

Requirements:

• Active Top Secret clearance (required)
• Must be eligible for DCSA Personnel Assurance Program enrollment
• CompTIA Security+ (DoD 8570 IAT Level II minimum)
• Bachelor’s Degree
• 6+ years of relevant Cloud platform experience, preferably AWS or Microsoft Azure
• Experience with logging, security information and event management (SIEM), endpoint security, and cloud native monitoring tools
• Ability to translate cybersecurity risks and technical findings into clear, actionable recommendations for technical and nontechnical audiences

Desired Skills:

• Infrastructure-as-code (IAC) development using Terraform, CloudFormation, or comparable tools
• CI/CD pipeline design and administration using tools such as Gitlab CI/CD
• Strong scripting/programming skills in Bash, Python, PowerShell, or similar languages
• Identity and access management, security groups/firewalls, Security Hub, and SCPs.
• Automated provisioning, deployment, configuration, scaling, and recovery of cloud resources
• Observability engineering experience (e.g., monitoring, centralized logging, alerting, metrics, tracing and dashboard development)
• Troubleshooting of cloud infrastructure in large cloud environments
• Technical documentation, architecture diagrams, deployment runbooks, and configuration management records
• Container technology expertise such as Docker, Podman, and Kubernetes
• One or more of the following certifications:
  • CISSP or Similar Cybersecurity Certification
  • Red Hat Certified System Administrator – RHCSA
  • AWS Certified CloudOps Engineer (Or similar AWS certification)

Linux Administration

• Administer, configure, and maintain Linux Server environments (RHEL8, RHEL9, RHEL10) in compliance with DCSA security requirements utilizing AWS tools.
• Manage Linux distributions, system services, packages, repositories, kernel updates, users, permissions, authentication, storage, file systems, and secure remote access
• Automate routine tasks using, Bash, Python, Ansible, or similar tools to: monitor system performance and availability, support backup, restoration, and disaster recovery activities, and maintain configuration documentation
• Perform system hardening and security baseline implementation per DISA STIGs and NIST standards in automated and repeatable manners.
• Monitor system performance, troubleshoot issues, and implement proactive maintenance procedures using AWS or Linux tools.
• Manage Linux updates, patches, and vulnerability remediation in accordance with DCSA timelines
• Configure and maintain Linux-based security tools and monitoring solutions in concurrence with DoW guidance.

Windows Administration

• Administer, configure, and maintain Windows Server environments (2016/2019/2022) in compliance with DCSA security requirements
• Manage Active Directory Domain Services (AD DS), Group Policy Objects (GPOs), and organizational units
• Perform system hardening and security baseline implementation per DISA STIGs and NIST standards
• Monitor system performance, troubleshoot issues, and implement proactive maintenance procedures
• Manage Windows updates, patches, and vulnerability remediation in accordance with DCSA timelines
• Configure and maintain Windows-based security tools and monitoring solutions

Microsoft Entra (Azure AD) Management

• Administer Microsoft Entra ID (Azure Active Directory) tenant configurations
• Implement and manage Conditional Access policies, Multi-Factor Authentication (MFA), and identity protection
• Configure and maintain hybrid identity solutions including Azure AD Connect
• Manage user provisioning, role-based access control (RBAC), and privileged identity management (PIM)
• Implement and monitor single sign-on (SSO) and federation services
• Ensure compliance with zero-trust security principles and government identity standards

Our team is always hungry for more – more knowledge, more problem solving, more growth, more innovation, and, ultimately, customer success. This hunger and hustle fuel our determination to excel in everything we do. It’s not just about meeting established goals; it’s about exceeding them. We take immense pride in applying our expertise in cutting-edge technologies and our ability to adapt to emerging trends directly to the users in the field, as our nation’s protectors deserve nothing less.

Omni Federal is an equal opportunity and affirmative action employer. Omni Federal is committed to administering all employment and personnel actions on the basis of merit and free of discrimination based on race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or status as an individual with a disability. Consistent with this commitment, we are dedicated to the employment and advancement of qualified minorities, women, individuals with disabilities, protected veterans, persons of all ethnic backgrounds and religions according to their abilities