Sr. DevSecOps Engineer 5

Base-2 Solutions; Reston (VA); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Company-paid health premiums

401(k) with company match

Flexible PTO

Job summary

Base-2 Solutions in Reston, VA is seeking a Senior DevSecOps Engineer to design, implement, and maintain secure, efficient software development and deployment pipelines for classified environments. This role requires working with customers, development teams, and internal technical teams to integrate security across the lifecycle, enabling high-quality and reliable software delivery.

Responsibilities include building CI/CD pipelines from scratch in GitLab CI/CD and Jenkins with security scanning

Qualifications

• Active Top Secret/SCI with CI Polygraph required.
• 10+ years of DevSecOps experience across the SDLC.
• Experience delivering DevSecOps services across multiple classified domains.
• Strong experience with DevOps, CI/CD pipelines, containerization, and automation tools (Jenkins, GitLab CI/CD, Docker).
• Strong experience with IaC tools (Terraform, CloudFormation, Ansible).
• Scripting in Python and Bash in Linux environments (RHEL/Oracle Linux).
• Understand AWS capabilities (EC2, S3, IAM, RDS) and secure cloud architectures.
• DoD 8140/8570 IAT Level II certification (e.g., CompTIA Security+, GSEC, SSCP).

Responsibilities

• Collaborate with customers and internal teams to design and implement automated technical solutions across multiple classification environments.
• Work independently and in teams to address complex technical requirements.
• Develop CI/CD pipelines from scratch in GitLab CI/CD and Jenkins with integrated security scanning and STIG validation.
• Provide expert guidance on pipeline troubleshooting and DevSecOps best practices.
• Create and maintain IaC templates (CloudFormation) to architect secure tool infrastructure across AWS GovCloud, C2S, TC2S.
• Ensure STIG compliance and mentor engineers on IaC best practices.
• Lead advanced troubleshooting by analyzing logs and conducting root cause analysis.
• Provide security guidance on secure coding, vulnerability remediation, and ATO support.
• Mentor junior engineers through code reviews and knowledge sharing.
• Maintain technical documentation and promote best practices for team improvement.

Skills

DevSecOps

CI/CD

Jenkins

GitLab CI/CD

Docker

Terraform

CloudFormation

Ansible

Python

Bash

AWS

STIG

Education

Bachelor's Degree

Tools

CloudFormation

Terraform

Job description

• Required Security Clearance: Top Secret/SCI with CI Polygraph
• Location: Reston, VA
• Work Type: On-Site
• Shift: First

• Requisition ID: 3695
• Standard Title: Senior DevSecOps Engineer
• Required Security Clearance: Top Secret/SCI with CI Polygraph
• Location: Reston, VA
• Work Type: On-Site
• Shift: First
• Referral Eligibility: Eligible
• U.S. Citizenship Required? Yes

Position Summary

As a Sr. DevSecOps Engineer 5, you will design, implement, and maintain secure, efficient software development and deployment pipelines supporting classified mission environments. This role works with customers, development teams, and internal technical teams to integrate security practices throughout the development and operations lifecycle, enabling high-quality, secure, and reliable software delivery.

Essential Duties And Responsibilities

• Collaborate with customers and internal teams to design and implement automated technical solutions across multiple classification environments.
• Work independently and as part of a team to address complex technical requirements.
• Develop CI/CD pipelines from scratch in GitLab CI/CD and Jenkins with integrated security scanning and STIG compliance validation.
• Provide expert guidance to development teams on pipeline troubleshooting and DevSecOps best practices.
• Create and maintain Infrastructure as Code templates, primarily using CloudFormation, to architect highly available, resilient, and secure DevSecOps tool infrastructure across AWS environments, including GovCloud, C2S, and TC2S.
• Ensure STIG compliance and guide junior engineers on Infrastructure as Code best practices.
• Lead advanced troubleshooting by analyzing system and application logs using Linux command-line tools.
• Conduct root cause analysis for complex issues and develop mitigation strategies for service degradation.
• Provide expert security guidance to development teams on secure coding practices, STIG compliance, vulnerability remediation, and ATO support.
• Mentor junior engineers through code reviews, technical guidance, and knowledge sharing.
• Maintain technical documentation, promote best practices, and support continuous team improvement.

Required Qualifications

• Active Top Secret/SCI with CI Polygraph.
• 10+ years of experience as a DevSecOps Engineer or similar role, with a focus on infrastructure automation, scalability, and reliability across the software development lifecycle.
• Experience delivering DevSecOps services across multiple classified domains.
• Strong experience with DevOps, CI/CD pipelines, containerization, and automation tools such as Jenkins, GitLab CI/CD, and Docker.
• Strong experience with Infrastructure as Code tools such as Terraform, CloudFormation, and/or Ansible.
• Strong experience with scripting languages such as Python and Bash in a Linux environment, such as RHEL, Oracle Linux, or similar.
• Understanding of AWS capabilities, including EC2, S3, IAM, and RDS, and experience architecting secure cloud-based infrastructure and services.
• Certification meeting DoD 8140/8570 IAT Level II requirements, such as CompTIA Security+, GSEC, or SSCP.

Preferred Qualifications

• Experience with Artifactory, SonarQube, and Prisma Cloud.
• Experience with AWS GovCloud, C2S, and TC2S environments.
• Familiarity with Azure or GCP.
• Experience mentoring junior engineers in DevSecOps, CI/CD, IaC, and security compliance practices.

Required Education and Experience Equivalency

• High School Diploma/GED: N/A
• Associate Degree: N/A
• Bachelor's Degree: 10 years of experience.
• Master's Degree: 10 years of experience.
• PhD: 10 years of experience.

Required Certifications

• Minimum DoD 8140/8570 IAT Level II certification, such as CompTIA Security+, GSEC, or SSCP.

Required Security Clearance

• Active Top Secret/SCI with CI Polygraph.

Pay & Benefit Highlights

Compensation

• Competitive fixed salary or hourly pay (based on experience, skills, location, and internal equity).
• Employee referral bonuses up to $10,000 per hired referral.
• Additional bonus opportunities for exceptional performance and contributions to business development and company growth (role-dependent).

Health

• 100% company-paid medical premiums for employees and eligible dependents.
• Choose from multiple plan options with CareFirst, Kaiser, and UnitedHealthcare, including PPO, POS, HMO, and HSA-compatible plans.
• 100% company-paid dental premiums for employees and eligible dependents.
• 100% company-paid vision premiums for employees and eligible dependents.

Income Protection

• 100% company-paid premiums for short-term disability.
• 100% company-paid premiums for long-term disability.
• 100% company-paid premiums for accidental death & dismemberment (AD&D).
• 100% company-paid premiums for life insurance up to $200,000.

Retirement

• 401(k) with immediate vesting: 4% company match plus a 4% non-elective company contribution (8% total).
• 401(k) pre-tax and Roth options.

Leave

• Up to 20 days of flexible paid time off (PTO).
• 11 paid floating holidays.

Work-Life Balance

• Flexible work schedules, including flex time and compressed work periods (contract and project-dependent).

NT