Senior DevSecOps Engineer - cATO & CI/CD Expert

Chameleon Integrated Services; Linthicum (MD); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Vision plan

401K with company match

Life insurance

Disability insurance

Training allowance

PTO

Job summary

Chameleon Integrated Services seeks a Senior DevSecOps / cATO Engineer to design, build, and operate advanced CI/CD pipelines across both unclassified and classified environments. The role emphasizes security left, automated guardrails, and rapid transition to continuous ATO/cATO models.

The candidate will bridge software development, IT operations, and cybersecurity compliance. Responsibilities include building secure pipelines, IaC/CaC, automation of STIGs, and supporting system accreditations

Qualifications

• Experience building and operating automated CI/CD pipelines.
• Familiarity with Infrastructure as Code (Terraform) and Configuration as Code (Ansible).
• Strong containerization/orchestration knowledge (e.g., Kubernetes).
• Solid understanding of RMF, eMASS integration, and ATO/cATO artifacts.

Responsibilities

• Engineer, maintain, and optimize secure CI/CD pipelines across sprints.
• Implement IaC/CaC for infrastructure and configurations.
• Automate security controls, guardrails, and STIGs in deployment pipelines.
• Produce evidence and documentation for system accreditations and cATO workflows.
• Conduct software integration, automated testing, vulnerability scanning, and deployments.
• Provide incident response support with pipeline-driven remediation.
• Research and assess Agentic AI integrations to improve automation.

Skills

CI/CD pipelines

IaC

CaC automation

Containers & orchestration

RMF & ATO/cATO

Vulnerability scanning

DoD 8140/8570 cert

Tools

Terraform

Ansible

Kubernetes

Job description

Chameleon Integrated Services seeks a Senior DevSecOps / cATO Engineer to design, build, and operate advanced CI/CD pipelines across both unclassified and classified environments. The role emphasizes security left, automated guardrails, and rapid transition to continuous ATO/cATO models.

The candidate will bridge software development, IT operations, and cybersecurity compliance. Responsibilities include building secure pipelines, IaC/CaC, automation of STIGs, and supporting system accreditations