Senior DevSecOps Engineer – CI/CD & Security (TS/SCI)

BuddoBot Inc.; Herndon (VA); On-site; USD 160,000 - 210,000; Full time

Job summary

Dark Wolf in Chantilly/Herndon, VA seeks an Expert DevSecOps Engineer to anchor CI/CD tooling, security integration, and platform resilience. You will lead enterprise CI/CD pipelines, automate security controls, and enforce compliance across complex systems for defense and intelligence missions.

You will guide teams through testing architectures, vulnerability remediation, and IaC strategy while maintaining observability with modern telemetry stacks in a high-security environment.

Qualifications

• Requires US Citizenship with active TS/SCI clearance and Full-Scope Polygraph.
• Bachelor's degree in Computer Science, Information Systems, Engineering, or related field.
• 10+ years of progressive engineering experience with CI/CD and automated pipelines.

Responsibilities

• Lead CI/CD platform architecture, maintenance, and scaling across pipelines.
• Integrate automated security controls (SAST/DAST, dependency auditing, vulnerability scanning).
• Design and maintain automated testing frameworks (unit/integration/UAT).
• Collaborate with development and security teams to remediate vulnerabilities and architectural weaknesses.
• Ensure regulatory compliance and security governance across systems.
• Define IaC standards and multi-environment deployment frameworks.

Skills

Leadership

Agile/Scrum

CI/CD concepts

Security integration

Python/Go

Education

Bachelor's degree in CS/IS/Engineering

Tools

Kubernetes

Open Policy Agent (OPA)

HashiCorp Vault

Prometheus

Grafana

ELK/OpenSearch

Job description

Dark Wolf in Chantilly/Herndon, VA seeks an Expert DevSecOps Engineer to anchor CI/CD tooling, security integration, and platform resilience. You will lead enterprise CI/CD pipelines, automate security controls, and enforce compliance across complex systems for defense and intelligence missions.

You will guide teams through testing architectures, vulnerability remediation, and IaC strategy while maintaining observability with modern telemetry stacks in a high-security environment.