Sr. DevOps Engineer III with Security Clearance

Cornerstone Defense; Reston (VA); On-site; USD 160,000 - 210,000; Full time

Benefits offered by this job

401(K) match

tuition and training assistances

paid vacation/leave

fitness reimbursement program

college savings plan

commuter benefits

financial advisory services

flex spending accounts

health savings accounts

STD/LTD coverage

life and AD&D insurance

employee assistance programs

life financial planning assistance

legal resources

Job summary

Cornerstone Defense is seeking an experienced Sr. DevOps Engineer III to design, implement, and maintain secure software development and deployment pipelines across Reston, VA; College Park, MD; and DC area bases.

You will integrate security into the development lifecycle, enabling high-quality, reliable software delivery in a demanding environment. You will lead Terraform/CloudFormation IaC, CI/CD workflows in GitLab and Jenkins, and guide junior engineers while ensuring STIG compliance and

Qualifications

• Active TS/SCI Clearance with CI poly.
• 10+ years of DevSecOps/Infrastructure automation experience.
• Strong AWS and DevSecOps pipeline expertise across multiple environments.
• Experience with STIG compliance and secure coding practices.

Responsibilities

• Collaborate with customers and internal teams to design and implement automatic technical solutions across multiple classification environments, working independently or as part of the team to address complex technical requirements.
• Develop CI/CD pipelines from scratch in GitLab CI and Jenkins with integrated security scanning and STIG compliance validation, providing expert guidance to development teams on pipeline troubleshooting and implementing DevSecOps best practices.
• Create and maintain Infrastructure as Code (IaC) templates primarily using CloudFormation to architect highly available, resilient, and secure DevSecOps tool infrastructure across AWS environments (GovCloud, C2S, TC2S) while ensuring STIG compliance and guiding junior engineers on IaC best practices.
• Lead advanced troubleshooting efforts by analyzing system and application logs using Linux command-line tools, conducting root cause analysis for complex issues, and developing mitigation strategies for service degradation.
• Provide expert security guidance to development teams on secure coding practices, STIG compliance, vulnerability remediation, and other best practices in support of their ATO efforts.
• Mentor junior engineers through code reviews, technical guidance, and knowledge sharing while maintaining technical documentation, promoting best practices, and fostering continuous team improvement.

Skills

DevSecOps

CI/CD pipelines

Linux

AWS

Terraform

CloudFormation

Ansible

Jenkins

GitLab CI/CD

Python

Tools

Jenkins

GitLab CI/CD

Artifactory

SonarQube

Prisma Cloud

Job description

Sr. DevOps Engineer III Reston, VA/ College Park, MD/ Anacostia- Bolling Base, DC TS/SCI with polygraph As Sr. DevOps Engineer III, you'll play a critical role in designing, implementing, and maintaining secure and efficient software development and deployment pipelines. You will collaborate with cross-functional teams to integrate security practices seamlessly into the development and operations lifecycle, ensuring the delivery of high-quality, secure, and reliable software solutions.

Company Benefits:

Cornerstone Defense offers a comprehensive list of benefits, designed to give employees and their families several options to choose from when selecting benefits that best fit their needs. These offerings include not only a full suite of the traditional Medical/Dental/Vision insurances, but also a number of other benefits and perks to include, but not limited to:

• A 401(K) plan with a company match
• tuition and training assistances
• paid vacation/leave
• a fitness reimbursement program
• college savings plan
• commuter benefits
• financial advisory services
• flex spending accounts
• health savings accounts
• STD/LTD coverage
• life and AD&D insurance
• employee assistance programs
• life financial planning assistance
• and legal resources

What you'll do:

• Collaborate with customers and internal teams to design and implement automatic technical solutions across multiple classification environments, working independently or as part of the team to address complex technical requirements.
• Develop CI/CD pipelines from scratch in GitLab CI and Jenkins with integrated security scanning and STIG compliance validation, providing expert guidance to development teams on pipeline troubleshooting and implementing DevSecOps best practices.
• Create and maintain Infrastructure as Code (IaC) templates primarily using CloudFormation to architect highly available, resilient, and secure DevSecOps tool infrastructure across AWS environments (GovCloud, C2S, TC2S) while ensuring STIG compliance and guiding junior engineers on IaC best practices.
• Lead advanced troubleshooting efforts by analyzing system and application logs using Linux command-line tools, conducting root cause analysis for complex issues, and developing mitigation strategies for service degradation.
• Provide expert security guidance to development teams on secure coding practices, STIG compliance, vulnerability remediation, and other best practices in support of their ATO efforts.
• Mentor junior engineers through code reviews, technical guidance, and knowledge sharing while maintaining technical documentation, promoting best practices, and fostering continuous team improvement.

What you'll need to succeed:

• Active TS/SCI Clearance with CI poly.
• Minimum IAT Level 2 Certification (CompTIA Security+, GSEC, SSCP, etc)
• 10+ years of experience as a DevSecOps Engineer or similar role, with a strong focus on infrastructure automation, scalability, and reliability across the software development lifecycle.
• Expert experience with DevOps practices, CI/CD pipelines, containerization, and other automation tools (e.g., Jenkins, GitLab CI/CD, Artifactory, SonarQube, and Prisma Cloud).
• Expert experience delivering DevSecOps services across multiple classified domains
• Expert understanding of AWS capabilities (EC2, S3, IAM, RDS, etc) and architecting secure cloud-based infrastructure and services. (familiarity with other cloud platforms a plus)
• Strong experience with infrastructure as code (IaC) tools such as Terraform, CloudFormation, or Ansible.
• Strong experience with scripting languages (e.g., Python, Bash), in a Linux environment (RHEL, Oracle Linux, or similar)