Sr DevSecOps Engineer

System One; Annapolis (MD); Hybrid; USD 120,000 - 145,000; Full time

Benefits offered by this job

Health and welfare benefits

401(k) plan

Job summary

System One is staffing a cleared DevSecOps Generalist role for the Ft. Meade area, focusing on designing, automating, and securing infrastructure and deployment pipelines with Red Hat, Ansible, and scripting to maintain secure CI/CD processes.

The position requires an active DoD Secret clearance (or higher) and Maryland residency with on-site work at Ft. Meade as needed. It is a 6 months contract to hire with competitive compensation and benefits.

Qualifications

• Active DoD Secret clearance or higher required.
• Must be local to Maryland, able to commute to Ft. Meade.
• 3+ years in DevSecOps/DevOps or related field.
• Experience with Red Hat Enterprise Linux and Ansible.
• Proficient in Bash and Python scripting.

Responsibilities

• Design declarative GitOps CI/CD pipelines (GitLab CI, GitHub Actions) with SAST, DAST, container scanning and SBOM generation.
• Automate policy-as-code to satisfy continuous compliance gates under DoDI 8430 and OSD CIO cATO requirements.
• Author hardened container definitions and enable automated validation and certification (Iron Bank/Repo One).
• Architect and refactor microservices using Go, Python, Java, or Rust and implement unit/integration/contract tests.

Skills

Active DoD Secret clearance

Red Hat Enterprise Linux (RHEL)

Ansible

CI/CD pipelines

GitLab CI

GitHub Actions

Jenkins

Python

Go

Java

Rust

Tools

GitLab CI

GitHub Actions

Jenkins

Ansible

Docker

OpenSCAP

STIG

Job description

DevSecOps Generalist

Clearance: Secret Clearance or Higher

Location: Ft Meade, Hybrid (2 days a week on-site)

Position Type: 6 months contract to hire

Compensation Range: $75/hr. W2 Benefits Available

Conversion Salary: Up to $145K annually, plus benefits

Company Overview

System One IT is staffing a direct hire DevSecOps Generalist role for a leading innovator in the technology sector, specializing in the development and implementation of advanced virtual solutions.The company’s mission is to empower businesses with cutting-edge technology that enhances efficiency, productivity, and connectivity. With a team of highly skilled professionals, they deliver customized solutions tailored to meet the unique needs of our clients across various industries. Their commitment to excellence, innovation, and customer satisfaction drives them to continuously push the boundaries of what is possible. They’re dedicated to shaping the future of technology and making a positive impact on the world. System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

Position Overview

Seeking a cleared DevSecOps Generalist to design, automate, and secure infrastructure and deployment pipelines. In this role, you will bridge the gap between development, security, and operations by leveraging Red Hat, Ansible, and custom scripting to maintain secure CI/CD processes. This position requires an active Secret clearance (or higher) and is located in Maryland, requiring the ability to work on-site at Ft. Meade as needed. The Senior DevSecOps Engineer will lead the automated build, secure supply chain certification, container hardening, and continuous delivery of mission‑critical software across defense cloud environments. This role bridges full‑stack software development with automated security gates, enforcing compliance with DoDI 8430 (Accelerated Mission Software Development), the DoD Software Modernization Strategy, and Continuous Authorization to Operate (cATO) criteria.

Day-To-Day Duties and Responsibilities

• CI/CD Pipeline Architecture Design: declarative GitOps pipelines (GitLab CI, GitHub Actions) integrating SAST, DAST, Container Scanning, Dependency Scanning, and Software Bill of Materials (SBOM) generation.
• CATO & Governance Automation: Implement automated policy-as-code to satisfy continuous compliance gates under DoDI 8430 and OSD CIO cATO requirements (Real-time Visibility, Active Cyber Defense, Pipeline Attestation).
• Iron Bank Container Hardening: Author hardened container definitions (Dockerfiles) adhering to DoD Container Hardening Standards. Remediate CVEs, automate OpenSCAP/STIG validation, and shepherd containers through the Iron Bank / Repo One pipeline to achieve DCCS certification.
• Software Development & API Engineering: Architect and refactor microservices using modern programming languages (Go, Python, Java, or Rust). Build automated unit, integration, and contract tests following 12-factor application design principles.

Minimum Qualifications

• Clearance: Active DoD Secret clearance (or higher).
• Location: Must be local to Maryland with the ability to commute to and work on-site at Ft. Meade as required.
• Experience: 3+ years of professional experience in DevSecOps, DevOps, Systems Engineering, or a related industry role.
• Hands-on experience administering and configuring Red Hat Enterprise Linux (RHEL).
• Proven experience with configuration management and automation using Ansible.
• Strong proficiency in writing automation scripts using Bash and Python.
• Demonstrated experience designing and maintaining CI/CD processes and pipelines (e.g., GitLab CI, Jenkins, GitHub Actions).
• Hands-on experience integrating security testing (SAST, DAST, or container scanning) into automated pipelines.

Preferred Qualifications

• Prior direct experience working within or interfacing with DoW Software Factories (e.g., Platform One, Kessel Run, Army Software Factory).
• Hands-on experience with Iron Bank onboarding, Repo One merge requests, VAT (Vulnerability Assessment Tracker) justified findings, and automated container hardening.
• Practical knowledge of the DoD Enterprise DevSecOps Reference Design and CNSSI requirements.

Benefits

• Health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans.
• Participation in a 401(k) plan.

Equal Opportunity

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.