Senior DevSecOps Engineer - DoD/Hybrid Onsite

AGE Solutions; Chambersburg, Fort Meade (Franklin County, MD); Hybrid; USD 117,000 - 143,000; Full time

Benefits offered by this job

Paid leave 26 days

Bonuses

401(k) with match

Health benefits

Parental leave

Military pay

Professional growth

Profit sharing

Job summary

AGE Solutions is seeking a DevSecOps Engineer to integrate security into Agile SDLC and CI/CD processes across DoD-focused projects. You will drive secure development, perform automated testing, and collaborate with cross-functional teams to implement robust technical controls.

A TS clearance and proximity to Fort Meade or Chambersburg are required. The role emphasizes RMF/NIST alignment, shift-left security, and experience with modern architectures, cloud-native apps, and containerized

Qualifications

• Bachelor’s degree and 10+ years of related experience.
• DoD 8140 Work Role 652 – Security Architect Certification requirement (must have at least one): Security X/CASP+CE, CCSP, Cloud+, CISSP, CSSLP, CISM, CISSP-ISSAP, CISSP-ISSIP, CSSLP, and GSEC.
• Must have and maintain a current DoD Top Secret clearance.
• Must reside within commutable distance of Fort Meade, MD or Chambersburg, PA in order to work a hybrid onsite schedule (4 days onsite weekly).
• Demonstrated experience integrating cybersecurity into Agile SDLC environments.
• Demonstrated hands-on experience with CI/CD pipelines.
• Practical experience implementing DevSecOps and shift-left security practices.
• Experience using automated security testing tools within software development processes.
• Knowledge of RMF, NIST SP 800-37, and NIST SP 800-53.
• Knowledge and practical application of DoD STIGs and SRGs.

Responsibilities

• Embed cybersecurity engineering into Agile software development and modernization activities.
• Integrate security requirements and controls throughout the SDLC and CI/CD pipelines.
• Apply DevSecOps and shift-left security principles to identify and remediate vulnerabilities earlier in development.
• Implement and support automated security testing within CI/CD workflows.
• Participate with development teams in requirements discussions, design activities, sprint planning, and other lifecycle events.
• Translate RMF, NIST SP 800-53, DoD cybersecurity policy, STIGs, SRGs, and related security requirements into actionable development and engineering tasks.
• Collaborate with developers, architects, system owners, ISSMs, and ISSOs to develop achievable technical security controls before formal assessment.
• Provide threat-informed security engineering guidance for legacy, modernized, and cloud-native applications.
• Support secure development involving APIs, microservices, containerized workloads, and other modern application architectures as applicable.
• Help development teams remediate security vulnerabilities while preserving mission functionality and delivery objectives.
• Provide engineering recommendations for technical controls such as authentication, encryption, network segmentation, and application security.
• Communicate security findings, technical risks, recommended remediation, and implementation approaches to technical and Government stakeholders.
• Manage security-engineering activities across multiple concurrent projects and development sprints.

Skills

Security architecture

CI/CD pipelines

RMF/NIST SP 800-53

DevSecOps

Threat modeling

Vulnerability remediation

DoD 8140

Education

Bachelor’s degree

Tools

CI/CD tools

Security testing tools

Docker

Kubernetes

Job description

AGE Solutions is seeking a DevSecOps Engineer to integrate security into Agile SDLC and CI/CD processes across DoD-focused projects. You will drive secure development, perform automated testing, and collaborate with cross-functional teams to implement robust technical controls.

A TS clearance and proximity to Fort Meade or Chambersburg are required. The role emphasizes RMF/NIST alignment, shift-left security, and experience with modern architectures, cloud-native apps, and containerized