Senior DevSecOps Engineer IRES - SSFB/HSV/FBEL

Amentum; Colorado Springs (CO); On-site; USD 150,000 - 190,000; Full time

Job summary

Amentum is seeking a Senior DevSecOps Engineer to lead cloud-native platform engineering for the NGE environment on the IRES contract. You will architect, automate, and secure pipelines across on-prem, hybrid, and cloud environments, enabling scalable mission-ready deployments.

Responsibilities include building robust CI/CD, IaC provisioning with Terraform/Ansible, and implementing container security in DoD-aligned frameworks. Remote work is not available; travel may be required.

Qualifications

• Experience designing and implementing cloud-native platform solutions across multi-cloud environments.
• Expertise building and securing CI/CD pipelines with automated testing and deployment workflows.
• Proficiency in IaC, configuration management, and container security controls.

Responsibilities

• Architect, automate, secure, and sustain the cloud-native delivery ecosystem for NGE on the IRES contract.
• Implement resilient DevSecOps pipelines and IaC across on-prem, hybrid, and cloud-hosted environments.
• Develop and maintain Terraform, Helm, Ansible scripts for repeatable deployments.

Skills

DevSecOps

Cloud-native

CI/CD

Kubernetes

IaC

Education

Bachelor's degree in a technical field

Tools

Terraform

Ansible

AKS

ECS

OpenShift

Docker

PostgreSQL

MySQL

Git

Job description

Position Title: Senior DevSecOps Engineer

Location

• Schriever Space Force Base, Colorado Springs, CO
• Redstone Arsenal, Huntsville, AL
• Fort Belvoir, VA

Relocation Assistance: None available at this time

Remote/Telework: NO - Not available for this position

Clearance Type: DoW Secret

Shift: Day shift

Travel Required: Up to 10% of the time

Description of Duties

As a Senior DevSecOps Engineer supporting the Next Generation Environment (NGE) on the Integrated Research and Development for Enterprise Solutions (IRES) contract, you will serve as a senior technical contributor responsible for architecting, automating, securing, and sustaining the cloud-native delivery ecosystem underpinning the Missile Defense Agency's (MDA) unified digital environment. In this role, you will help advance NGE's hybrid and multi-cloud modernization strategy by implementing resilient DevSecOps pipelines, Infrastructure-as-Code (IaC), Kubernetes-based platform services, and container security practices that enable secure, repeatable, and scalable application deployment across enterprise environments. You will work across engineering, cybersecurity, software, infrastructure, and Government stakeholder teams to integrate modern platform capabilities while ensuring compliance with DoD and MDA security requirements. You will play a key role in standardizing automation, improving deployment velocity, strengthening security controls, and supporting continuous integration and continuous delivery across on-premises, hybrid, and cloud-hosted mission systems.

Description of Duties

Cloud-Native Platform Engineering:

• Design, implement, and maintain scalable cloud and container platform solutions supporting NGE mission applications across environments including Azure Kubernetes Service (AKS), AWS Elastic Container Service (ECS), and Red Hat OpenShift Container Platform (OCP).

DevSecOps Pipeline Automation:

• Engineer, enhance, and sustain CI/CD pipelines that integrate automated build, test, security scanning, release, and deployment workflows to accelerate software delivery while maintaining compliance and operational stability.

Infrastructure as Code (IaC) & Configuration Automation:

• Develop and maintain automated infrastructure provisioning and configuration management solutions using tools such as Terraform, Helm, Ansible, and Bash, enabling repeatable, version-controlled deployments across development, test, and production environments.

Container Security & Compliance:

• Implement container hardening, image assurance, secrets management, and runtime security controls aligned to DoD, MDA, RMF, DISA STIG, and Zero Trust requirements.
• Support continuous monitoring and compliance validation for containerized workloads and platform services.

Hybrid Cloud Integration:

• Assess existing application and infrastructure architectures and develop migration and integration strategies for cloud-enabled and containerized environments.
• Ensure interoperability between legacy services, cloud-native platforms, and enterprise mission systems.

Platform Architecture & Service Enablement:

• Support the design and evolution of resilient platform services that host modern applications and shared capabilities across IaaS and PaaS ecosystems, including orchestration, service networking, observability, policy enforcement, and secure access patterns.

Cross-Functional Engineering Collaboration:

• Partner with software developers, systems engineers, network engineers, cybersecurity teams, database administrators, and Government stakeholders to ensure cohesive integration of infrastructure, applications, and security controls across the NGE ecosystem.

Operational Sustainment & Troubleshooting:

• Monitor, troubleshoot, and resolve complex platform, integration, and deployment issues across Kubernetes and cloud-hosted environments.
• Improve operational resilience through automation, root cause analysis, and proactive engineering improvements.

Database & Application Hosting Support:

• Support deployment and sustainment of cloud-hosted and containerized application data services, including technologies such as PostgreSQL, Cassandra, and MySQL, ensuring secure configuration, availability, and performance alignment with mission requirements.

Documentation & Engineering Governance:

• Develop and maintain technical documentation including implementation plans, pipeline designs, architecture diagrams, deployment procedures, standard operating procedures, and configuration baselines to support lifecycle management and operational continuity.

Technology Evaluation & Continuous Improvement:

• Evaluate emerging DevSecOps, platform engineering, and cloud technologies to improve automation, scalability, security, cost efficiency, and mission responsiveness across the NGE environment.

Stakeholder Reporting & Technical Communication:

• Provide technical status, risk identification, engineering recommendations, and platform capability assessments to program leadership and Government st