Senior DevSecOps Engineer 5: Secure Pipelines & STIG Expert

RPMGlobal; Reston, Northern (VA, KY); Hybrid; USD 180,000 - 240,000; Full time

Job summary

RPMGlobal is seeking a Senior DevSecOps Engineer to design, implement, and maintain secure pipelines for classified mission environments. This role collaborates with customers, development teams, and internal technical teams to integrate security across the development and operations lifecycle, enabling high-quality, secure software delivery.

You will build CI/CD pipelines in GitLab CI/CD and Jenkins with integrated security scanning and STIG validation, create IaC templates with CloudFormation

Qualifications

• Active Top Secret/SCI with CI Polygraph.
• 10+ years of experience as a DevSecOps Engineer or similar role.
• Experience delivering DevSecOps services across multiple classified domains.
• Strong experience with DevOps, CI/CD pipelines, containerization, and automation tools such as Jenkins, GitLab CI/CD, and Docker.

Responsibilities

• Collaborate with customers and internal teams to design and implement automated technical solutions across multiple classification environments.
• Work independently and as part of a team to address complex technical requirements.
• Develop CI/CD pipelines from scratch in GitLab CI/CD and Jenkins with integrated security scanning and STIG compliance validation.
• Provide expert guidance to development teams on pipeline troubleshooting and DevSecOps best practices.
• Create and maintain Infrastructure as Code templates, primarily using CloudFormation, to architect highly available, resilient, and secure DevSecOps tool infrastructure across AWS environments, including GovCloud, C2S, and TC2S.
• Ensure STIG compliance and guide junior engineers on Infrastructure as Code best practices.
• Lead advanced troubleshooting by analyzing system and application logs using Linux command-line tools.
• Conduct root cause analysis for complex issues and develop mitigation strategies for service degradation.
• Provide expert security guidance to development teams on secure coding practices, STIG compliance, vulnerability remediation, and ATO support.
• Mentor junior engineers through code reviews, technical guidance, and knowledge sharing.
• Maintain technical documentation, promote best practices, and support continuous team improvement.

Skills

DevSecOps

CI/CD pipelines

Jenkins

GitLab CI/CD

Docker

Terraform

CloudFormation

Ansible

Python

Bash

Linux

AWS

Security Compliance

Education

Bachelor's Degree

Master's Degree

PhD

Tools

Artifactory

SonarQube

Prisma Cloud

AWS GovCloud

C2S

TC2S

Job description

RPMGlobal is seeking a Senior DevSecOps Engineer to design, implement, and maintain secure pipelines for classified mission environments. This role collaborates with customers, development teams, and internal technical teams to integrate security across the development and operations lifecycle, enabling high-quality, secure software delivery.

You will build CI/CD pipelines in GitLab CI/CD and Jenkins with integrated security scanning and STIG validation, create IaC templates with CloudFormation