Senior DevSecOps & Platform Engineer

Bowhead; Dahlgren (VA); On-site; USD 175,000 - 195,000; Full time

Job summary

Bowhead seeks a Senior DevSecOps & Platform Engineer to support NSWCDD RDT&E environments. You will design secure CI/CD pipelines, manage Linux/Windows, Docker/Kubernetes, and integrate AI/ML while complying with DoD cybersecurity standards.

Collaboration with government stakeholders, software teams, and cybersecurity personnel is essential to modernize enterprise platforms. Responsibilities span architecture, CI/CD, full-stack development, cyber compliance, and AI-enabled automation, with a

Qualifications

• 7–10 years of experience in relevant roles.
• BA/BS degree required.
• IAT level III certification is required.
• Experience in DevSecOps engineering, platform engineering, or related disciplines.
• Working knowledge of Linux and Windows operating systems.
• Experience with Docker and Kubernetes containerization/orchestration.
• Experience with VMware vSphere virtualization.
• GitLab CI/CD pipelines hands-on experience.
• Familiarity with Artifactory, Jira, and Confluence.
• Programming experience in Python and JavaScript.
• Experience with relational databases (Microsoft SQL Server, Oracle SQL, MySQL, MariaDB).
• Understanding of cybersecurity principles and secure software practices.
• Experience with STIGs, ACAS, SCAP, static analysis or similar tools.
• Strong troubleshooting and root-cause analysis skills.
• Ability to communicate technical information to diverse stakeholders.
• Ability to work independently and in multidisciplinary teams.

Responsibilities

• Design, implement, and maintain secure, scalable DevSecOps platforms.
• Develop and optimize CI/CD pipelines using GitLab.
• Support Docker and Kubernetes containerized environments.
• Administer Linux and Windows operating systems.
• Support VMware vSphere virtualization.
• Integrate Artifactory, Jira, and Confluence into workflows.
• Identify automation opportunities for infra and deployments.
• Develop full-stack capabilities with Python and JavaScript.
• Collaborate with cybersecurity teams to maintain DoD compliance.
• Support AI/ML integration and intelligent workflow orchestration.

Skills

DevSecOps

Platform engineering

Software development

Cybersecurity

Troubleshooting

Education

BA/BS degree

Tools

Docker

Kubernetes

VMware vSphere

GitLab CI/CD

Artifactory

Jira

Confluence

Python

JavaScript

SQL databases

STIGs

ACAS/SCAP

Static code analysis

Job description

Overview

Senior DevSecOps & Platform Engineer (CORPIT)

Bowhead is seeking a highly skilled Senior DevSecOps & Platform Engineer to support the Naval Surface Warfare Center Dahlgren Division (NSWCDD) Research, Development, Test & Evaluation (RDT&E) environment. The successful candidate will possess a diverse technical background encompassing DevSecOps architecture, platform engineering, full-stack application development, cybersecurity compliance, and emerging Artificial Intelligence/Machine Learning (AI/ML) technologies. This position requires a versatile technical professional capable of designing, developing, deploying, securing, and maintaining enterprise applications and infrastructure across complex computing environments. The individual will play a critical role in integrating modern development practices, automating infrastructure and deployment processes, ensuring compliance with Department of Defense (DoD) cybersecurity requirements, and supporting innovative AI-enabled capabilities. The ideal candidate will demonstrate strong technical proficiency, analytical problem-solving skills, and the ability to collaborate with government stakeholders, software developers, cybersecurity personnel, and infrastructure engineering teams.

Responsibilities

DevSecOps Architecture and Platform Engineering

• Design, implement, and maintain secure, scalable DevSecOps platforms supporting enterprise application development and deployment.
• Develop, manage, and optimize Continuous Integration/Continuous Deployment (CI/CD) pipelines using GitLab.
• Support containerized application environments utilizing Docker and Kubernetes.
• Administer and troubleshoot Linux and Windows operating environments.
• Support virtualized infrastructure utilizing VMware vSphere.
• Integrate artifact repositories, development tools, and collaborative platforms, including Artifactory, Jira, and Confluence.
• Identify opportunities to automate infrastructure management, application deployments, and operational workflows.

Full-Stack Application Development

• Develop, maintain, and enhance software applications using Python and JavaScript.
• Support application integration across multiple platforms, databases, and enterprise systems.
• Develop and maintain database connectivity and application functionality utilizing Microsoft SQL Server, Oracle SQL, MySQL, and MariaDB.
• Collaborate with development teams to improve application performance, reliability, scalability, and security.
• Incorporate automated testing, code validation, and secure software development practices throughout the application lifecycle.
• Troubleshoot complex application, infrastructure, and integration issues.

Cybersecurity and Compliance

• Integrate cybersecurity requirements and secure development practices throughout the software development lifecycle.
• Implement and validate Security Technical Implementation Guides (STIGs) across applicable systems and applications.
• Support vulnerability identification, assessment, tracking, and remediation using Assured Compliance Assessment Solution (ACAS), SCAP, McAfee security tools, and related technologies.
• Implement static code analysis and vulnerability scanning tools, including Xray, within development pipelines.
• Collaborate with cybersecurity professionals to address identified vulnerabilities and maintain compliance with applicable DoD security requirements.
• Support security assessments, audit preparation, remediation activities, and continuous monitoring efforts.
• Promote security automation and continuous compliance throughout the development and deployment process.

Artificial Intelligence and Machine Learning Integration

• Support the evaluation and integration of AI/ML technologies into enterprise development and operational environments.
• Develop and implement agentic workflows and AI-enabled automation capabilities.
• Work with Large Language Models (LLMs) and agentic harnesses to support intelligent workflow orchestration and process improvement.
• Evaluate opportunities to leverage AI technologies to enhance software development, troubleshooting, cybersecurity operations, and organizational efficiency.
• Collaborate with technical stakeholders to assess the feasibility, security, and operational value of emerging AI capabilities.

Technical Collaboration and Customer Support

• Serve as a technical subject matter expert across DevSecOps, application development, platform engineering, and cybersecurity disciplines.
• Collaborate with government customers and multidisciplinary technical teams to identify requirements and develop effective solutions.
• Provide technical recommendations concerning system architecture, application deployment, security improvements, and infrastructure modernization.
• Develop and maintain technical documentation, standard operating procedures, and configuration records.
• Investigate and resolve complex technical challenges while maintaining customer communication and operational continuity.

Qualifications

• Seven to ten (7-10) years of experience.
• BA/BS degree required.
• Must have an IAT level III certificaiton.
• Demonstrated professional experience in DevSecOps engineering, platform engineering, software development, or closely related technical disciplines.
• Working knowledge of Linux and Windows operating systems.
• Experience with containerization and orchestration technologies, including Docker and Kubernetes.
• Experience supporting virtualized infrastructure using VMware vSphere.
• Hands-on experience developing and maintaining GitLab CI/CD pipelines.
• Familiarity with Artifactory, Jira, and Confluence.
• Programming experience using Python and JavaScript.
• Experience working with relational databases, including one or more of the following: Microsoft SQL Server, Oracle SQL, MySQL, or MariaDB.
• Understanding of cybersecurity principles, vulnerability management, and secure software development practices.
• Experience with cybersecurity compliance tools and processes, including STIGs, ACAS, SCAP, static code analysis, or comparable technologies.
• Strong troubleshooting and root-cause analysis capabilities across applications, infrastructure, and development environments.
• Ability to communicate technical information effectively to engineering teams, program leadership, and government stakeholders.
• Ability to work independently and collaboratively within a multidisciplinary technical environment.

Preferred Qualifications

• Experience designing and implementing enterprise DevSecOps architectures.
• Advanced Kubernetes administration, configuration, and troubleshooting experience.
• Experience integrating automated security scanning and vulnerability management into CI/CD pipelines.
• Familiarity with DoD cybersecurity compliance requirements and Risk Management Framework (RMF) processes.
• Experience supporting DoD RDT&E or similarly complex federal IT environments.
• Experience developing full-stack applications and integrating enterprise database systems.
• Knowledge of AI/ML technologies, Large Language Models, agentic harnesses, and agentic workflows.
• Experience implementing AI-enabled automation within secure enterprise environments.
• Experience supporting platform modernization, infrastructure automation, and continuous compliance initiatives.
• Relevant industry certifications in DevSecOps, cloud technologies, Kubernetes, software engineering, or cybersecurity.

Desired Professional Attributes

• Demonstrates adaptability across multiple technical disciplines and rapidly evolving technologies.
• Possesses strong analytical skills and an innovative approach to problem-solving.
• Maintains a security-focused mindset throughout development and operational activities.
• Demonstrates initiative in identifying opportunities for automation and process improvement.
• Effectively balances software development, infrastructure operations, and cybersecurity requirements.
• Builds productive relationships with customers and technical stakeholders.
• Demonstrates attention to detail, accountability, and a commitment to mission success.

Targeted salary range is $175,000 to $195,000 annually based on qualifications and experience.

Physical Demands:

• Must be able to lift up to 25 pounds
• Must be able to stand and walk for prolonged amounts of time
• Must be able to twist, bend and squat periodically

SECURITY CLEARANCE REQUIREMENTS: Must currently hold a security clearance at the Top Secret/SCI level. US Citizenship is a requirement for Top Secret/SCI clearance at this location.

Please note that the salary information is a general guideline only. Bowhead considers factors such as (but not limited to) scope and responsibilities of the position, candidate’s work experience, education/training, key skills, internal peer equity, as well as, market and business considerations when extending an offer.

#LI-JR1