Senior DevSecOps Engineer: Secure Cloud Pipelines

RPMGlobal; Reston, Northern (VA, KY); Hybrid; USD 150,000 - 190,000; Full time

Job summary

RPMGlobal seeks a Sr. DevSecOps Engineer 5 in Reston, VA to design, implement, and maintain secure development and deployment pipelines for classified mission environments.

You will collaborate with customers and internal teams to integrate security throughout the lifecycle, enabling high-quality, secure software delivery. You will build CI/CD pipelines in GitLab CI/CD and Jenkins with security scanning and STIG validation, develop IaC via CloudFormation across AWS GovCloud, C2S, and TC2S, and

Qualifications

• Active Top Secret/SCI with CI Polygraph.
• 10+ years of experience as a DevSecOps Engineer or similar role, with a focus on infrastructure automation, scalability, and reliability across the software development lifecycle.
• Experience delivering DevSecOps services across multiple classified domains.
• Strong experience with DevOps, CI/CD pipelines, containerization, and automation tools such as Jenkins, GitLab CI/CD, and Docker.
• Strong experience with Infrastructure as Code tools such as Terraform, CloudFormation, and/or Ansible.
• Strong experience with scripting languages such as Python and Bash in a Linux environment, such as RHEL, Oracle Linux, or similar.
• Understanding of AWS capabilities, including EC2, S3, IAM, and RDS, and experience architecting secure cloud-based infrastructure and services.
• Certification meeting DoD 8140/8570 IAT Level II requirements, such as CompTIA Security+, GSEC, or SSCP.

Responsibilities

• Collaborate with customers and internal teams to design and implement automated technical solutions across multiple classification environments.
• Work independently and as part of a team to address complex technical requirements.
• Develop CI/CD pipelines from scratch in GitLab CI/CD and Jenkins with integrated security scanning and STIG compliance validation.
• Provide expert guidance to development teams on pipeline troubleshooting and DevSecOps best practices.
• Create and maintain Infrastructure as Code templates, primarily using CloudFormation, to architect highly available, resilient, and secure DevSecOps tool infrastructure across AWS environments, including GovCloud, C2S, and TC2S.
• Ensure STIG compliance and guide junior engineers on Infrastructure as Code best practices.
• Lead advanced troubleshooting by analyzing system and application logs using Linux command-line tools.
• Conduct root cause analysis for complex issues and develop mitigation strategies for service degradation.
• Provide expert security guidance to development teams on secure coding practices, STIG compliance, vulnerability remediation, and ATO support.
• Mentor junior engineers through code reviews, technical guidance, and knowledge sharing.
• Maintain technical documentation, promote best practices, and support continuous team improvement.

Skills

DevSecOps

CI/CD pipelines

Security best practices

Automation

Linux troubleshooting

Education

Bachelor's degree

Master's degree

PhD

Tools

Jenkins

GitLab CI/CD

Docker

Terraform

CloudFormation

Ansible

Python

Bash

AWS

EC2

S3

IAM

RDS

Job description

RPMGlobal seeks a Sr. DevSecOps Engineer 5 in Reston, VA to design, implement, and maintain secure development and deployment pipelines for classified mission environments.

You will collaborate with customers and internal teams to integrate security throughout the lifecycle, enabling high-quality, secure software delivery. You will build CI/CD pipelines in GitLab CI/CD and Jenkins with security scanning and STIG validation, develop IaC via CloudFormation across AWS GovCloud, C2S, and TC2S, and