Senior DevSecOps Engineer: DoD Cloud & Secure CI/CD

HyerTek; Brookeville (MD); Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) with employer contribution

PTO and holidays

Professional development and certs

Employee assistance program

Job summary

HyerTek is seeking a Sr. DevSecOps Engineer to own the software supply chain and delivery pipeline behind federal solutions, from commit to accreditation in Azure Government enclaves.

The role is hybrid on‑site at Fort Meade, with 2‑3 days in accredited facilities and relocation within commuting distance of Baltimore–Washington. You will design and maintain secure CI/CD pipelines, build hardened container images for AKS/OpenShift, integrate automated security checks, manage SBOMs and artifact

Qualifications

• 5+ years of hands‑on DevOps or DevSecOps engineering experience in security‑sensitive environments.
• Strong knowledge of GitHub Enterprise, Actions, and self‑hosted runners.
• Experience designing and maintaining CI/CD pipelines in GitHub Enterprise and Azure DevOps.
• Experience building secure container images with hardened base images and non‑root runtimes.
• Production experience with Kubernetes platforms (AKS/OpenShift) including deployments and secrets integration.
• Experience integrating automated security controls into CI/CD pipelines (source, dependencies, secrets, containers).
• Familiarity with SBOM generation, artifact signing, provenance, and artifact promotion.
• Proficiency with Terraform, Bicep/ARM or similar IaC.
• Experience with Azure services like Key Vault, Monitor, and Sentinel.
• Strong scripting/automation skills (Python, PowerShell, Node.js, C#/.NET).
• Excellent troubleshooting and documentation skills.
• DoD 8570/8140 IAT II certification and TS‑clearance preferred.

Responsibilities

• Design, maintain, and improve secure CI/CD pipelines across repositories and environments.
• Build and maintain secure containerized apps for Kubernetes platforms such as AKS/OpenShift.
• Integrate automated security and compliance checks to ensure findings are resolved before release.
• Manage SBOMs, artifact signing, provenance, and controlled promotion between environments.
• Manage secrets and configuration with approved vault solutions.
• Automate RMF/ATO evidence, monitoring, and security reporting.
• Improve observability, reliability, and disaster recovery practices.
• Partner with developers and cybersecurity teams to resolve vulnerabilities and optimize delivery.
• Create technical runbooks and customer‑handoff materials.

Skills

DevSecOps engineering

CI/CD pipelines

GitHub Actions

Azure DevOps

Kubernetes

SBOMs / software supply chain

Terraform

Scripting / automation

Security controls

RMF / ATO

Education

Bachelor's degree in a related field

Tools

GitHub Enterprise Server

OpenShift

AKS

Azure Key Vault

Job description

HyerTek is seeking a Sr. DevSecOps Engineer to own the software supply chain and delivery pipeline behind federal solutions, from commit to accreditation in Azure Government enclaves.

The role is hybrid on‑site at Fort Meade, with 2‑3 days in accredited facilities and relocation within commuting distance of Baltimore–Washington. You will design and maintain secure CI/CD pipelines, build hardened container images for AKS/OpenShift, integrate automated security checks, manage SBOMs and artifact