Sr. DevSecOps Engineer

Oteemo, Inc.; College Park (MD); On-site; USD 120,000 - 160,000; Full time

Job summary

Oteemo, Inc. is seeking a Sr. DevSecOps Engineer to lead the design and implementation of secure cloud-native infrastructure and CI/CD pipelines for the Department of Defense. The ideal candidate will possess hands-on expertise in multi-cloud environments, DevSecOps practices, and a deep understanding of security frameworks.

This role offers the opportunity to engage in transformational projects while working collaboratively to innovate and impact mission-critical environments, especially concerning security and compliance automation. Active Secret clearance is required.

Qualifications

• Minimum 3 years experience designing CI/CD pipelines.
• Strong background in security frameworks.
• Experience leading and mentoring teams.
• Hands-on coding experience with Python, Go, or Bash.

Responsibilities

• Lead the design of secure cloud-native infrastructure.
• Implement CI/CD pipelines with integrated security.
• Oversee automation and provisioning of environments.
• Act as a technical advisor to government stakeholders.

Skills

Multi-cloud experience (AWS, Azure, GCP)

Hands-on Kubernetes knowledge

CI/CD pipeline orchestration

Zero Trust & network security

Scripting in Bash, Python, or Go

Education

Active Secret clearance or higher

Relevant Cloud Certifications (AWS, Azure, GCP)

Security Certifications (CISSP, Security+)

Tools

Terraform

Ansible

GitLab CI

Jenkins

ArgoCD

Job description

Join Oteemo and become part of a transformation powerhouse where innovation meets impact. We're not just another consulting firm—we're architects of digital evolution, blending cutting‑edge technical expertise with human‑centered design principles to create solutions that resonate. Our work spans Infrastructure, Software Development, DevSecOps, Cybersecurity, Experience and Design, Organizational Change Management, and AI‑enabled solutions, but our approach is what truly sets us apart. We measure success through tangible business outcomes, not billable hours. We foster a culture of continuous learning where your ideas can thrive and technical excellence is celebrated. Our collaborative global team works across borders and time zones, tackling complex challenges for both Commercial Enterprise and Federal Defense clients with equal passion and precision. At Oteemo, you'll have the opportunity to work with emerging technologies and develop your skills alongside industry experts who are reshaping digital landscapes. If you're seeking a place where your technical prowess can drive meaningful change and where innovation isn't just encouraged—it's expected—Oteemo is your next career destination.

Job Description

The Sr. DevSecOps Engineer will lead the design, implementation, and operation of secure, scalable cloud‑native infrastructure, platforms, and CI/CD pipelines for mission‑critical Department of Defense programs. Act as a technical advisor to government stakeholders, drive DevSecOps roadmaps, implement Zero Trust and compliance automation, mentor platform and engineering teams, and deliver repeatable, automated, auditable deployments across cloud and air‑gapped/on‑prem environments.

Key Responsibilities

• Architecture & Strategy: Design enterprise‑scale DevSecOps and cloud‑native architectures across AWS, Azure, GCP, and on‑premise; define technical roadmaps; apply Zero Trust and defense‑in‑depth principles; lead architecture reviews and threat modeling.
• Platform & Infrastructure: Stand up and maintain secure infrastructure (cloud and on‑premise air‑gapped), including Kubernetes clusters and container platforms; oversee environment automation and reproducible provisioning.
• CI/CD & Pipelines: Architect and implement CI/CD and GitOps pipelines that integrate security scanning, compliance validation (RMF/NIST), automated testing, and continuous ATO/cATO workflows; design pipeline orchestration using tools such as GitLab CI, Jenkins, GitHub Actions, ArgoCD, and Flux.
• Infrastructure as Code (IaC) & Automation: Champion IaC and environment templatization (Terraform, Ansible, Kustomize, Helm, Jinja, etc.); automate provisioning, configuration management, and operational tasks.
• Security & Compliance: Integrate security controls into pipelines and platforms (secrets management, IAM, micro‑segmentation); ensure adherence to DoD security frameworks, RMF, and authorization processes; lead security architecture reviews.
• Operations & Upgrades: Maintain and upgrade production infrastructure and Kubernetes clusters; implement observability, monitoring, logging, and incident response practices.
• Stakeholder Engagement: Serve as technical liaison to program managers and senior leadership; present designs, roadmaps, and trade‑offs; assist with client onboarding and identify MVPs for delivery.
• Leadership & Mentorship: Provide technical guidance to DevSecOps, platform, and engineering teams; foster continuous improvement, documentation, and knowledge sharing.
• Documentation: Produce and maintain system design documentation, diagrams, runbooks, and briefings for leadership and customers.

Qualifications

Clearance & Experience: Active Secret clearance or higher (TS/SCI preferred); experience on DoD or federal contracts and familiarity with DoD processes.

Cloud & Platform Expertise: Hands‑on multi‑cloud experience (AWS, Azure, GCP) — strong experience in at least two providers; deep Kubernetes and containerization knowledge (EKS/GKE/OpenShift/RKE2/K3s).

CI/CD & Tooling: At least 3+ years proven experience designing and operating CI/CD/GitOps pipelines and pipeline orchestrators (Jenkins, GitLab, GitHub Actions, ArgoCD, etc.).

IaC & Automation: At least 3+ proficiency with Terraform, Ansible, or similar; scripting in Bash, Python, or Go.

Security: Strong background in Zero Trust, IAM, network security (micro‑segmentation, VPN, load balancing), secrets management, and embedding security into pipelines.

Operational Skills: Experience with platform operations, cluster lifecycle management, upgrades, and automation of routine tasks.

Communication & Leadership: Strong written and verbal skills; demonstrated ability to lead and mentor teams and present to senior leadership.

Certifications (Required / Strongly Preferred)

• Cloud Platform: One or more from AWS (Solutions Architect Professional, DevOps Pro, Security Specialty), Azure (Solutions Architect Expert, DevOps Engineer Expert), or GCP (Professional Cloud Architect / DevOps / Security Engineer).
• Security: CISSP, CCSP, CEH, or GIAC (GSEC/GCIH) or Security+ CE.
• DoD/Federal: DoD 8140/8570 compliance (Security+ minimum; CISSP/CASP+ preferred).

Preferred Qualifications

Active Top Secret/SCI clearance.

Experience with Navy, Marine Corps, or other service programs and Platform One / DoD Enterprise DevSecOps Reference Design.

Familiarity with software factory concepts, continuous ATO (cATO), and classified environment automation.

Familiarity with Agile/SAFe in government contexts.

Hands‑on coding experience (Python, Go, Bash).

Experience with observability stacks (Prometheus, Fluentd, Loki, Grafana), service mesh (Istio, Envoy), and CNCF ecosystem tooling.

Work Conditions

Hybrid remote/onsite as required by contract (roles require presence in Greater Washington, D.C. area or specific program sites).

Some travel may be required (up to 5 days per week depending on customer).

Additional Information

We Value

• Drive: Passion and energy to implement quality technical solutions. Self‑motivation and intellectual curiosity.
• Commitment to Quality: Passion to conceive and produce world‑class solutions that drive real‑world value for the customer.
• Customer Focus: Consultative approach to solving problems for customers. Expectations management.
• Communication: Superior communication skills. Ability to clearly articulate problems, solutions, risks, rewards etc. (written and verbal).
• Technical Skills: Love for technology. You have to be inherently passionate about technology.
• Business Acumen: Technology ultimately is used to enable the business. We look for people who understand how the businesses can be enabled through their technical solutions.

All your information will be kept confidential according to EEO guidelines.