DevSecOps / Security Engineer

Are you looking for your next challenge? Are you ready to work with a performance-based small company? At Zantech, we are a dynamic Woman Owned Small Business focused on providing complex, mission-focused solutions with a proven track record of outstanding customer performance and high employee satisfaction. We would love to talk with you regarding the next step in your career. Come join our team!Zantech is looking for a talented DevSecOps / Security Engineer to contribute to the success of our upcoming Technical Infrastructure and Platform Support project for an On-Site role based out of Arlington, VA.The DevSecOps / Security Engineer will play a crucial role in providing:Technical Infrastructure and Platform SupportCybersecurity and Information Assurance (RMF, continuous ATO, Compliance-as-Code)The DevSecOps / Security Engineer serves as the lead technical engineer for automation, CI/CD, and security posture of the cloud infrastructure, directly executing Technical Infrastructure and Platform Support requirements and supporting continuous Authority to Operate (ATO) under the DoD Risk Management Framework.Responsibilities Include, But Will Not Be Limited ToBuild and maintain secure, automated CI/CD pipelines and zero-downtime deployment processesAutomate infrastructure provisioning and configuration management via Infrastructure as CodeSupport the RMF process: System Security Plan, Security Assessment Report, and POA&M development and continuous monitoringApply and automate DISA STIGs; run vulnerability scanning and manage remediationIntegrate SAST/DAST testing and auto-generate compliance-as-code artifacts (e.g., Ports/Protocols/Services, topology diagrams) for eMASSRequired Experience Or Knowledge Of The Following Technologies/functions5 years in DevSecOps, including designing, implementing, and maintaining CI/CD pipelines and automating software deployment (Jenkins, GitLab CI/CD, or Ansible)5 years supporting the Risk Management Framework (RMF) for DoD or federal systems, including DISA STIGs, vulnerability assessments, and patching/remediation5 years automating cloud infrastructure and platform provisioning (AWS, Azure) using Infrastructure as Code (Terraform or CloudFormation).Skills Required:CI/CD pipeline design and secure software deployment automationInfrastructure as Code (Terraform, Ansible, CloudFormation)Security scanning and monitoring/logging integration (Nessus, OpenSCAP, Splunk, ELK Stack)Containerization and orchestration in microservices architectures (Docker, Kubernetes)SAST/DAST integration directly into the CI/CD pipelineRMF process support, DISA STIG application, and continuous ATO / eMASS artifact automationRequired Education/CertificationsEducation Required:Bachelor's degree in computer science, engineering, or equivalent, and 5+ years of experience ORAA with 7+ years of experience is an accepted substituteEducation Preferred:Bachelor's degree in Computer Science, Cybersecurity, or a related fieldCertifications Required:Current DoDM 8140.03-qualifying certification for the assigned cyberspace work role, e.g., Security+ or CySA+)Certifications Preferred:CISSP, AWS/Azure security specialty certification, Certified Kubernetes Security Specialist (CKS)Required Security ClearanceUS Citizenship and the ability to obtain and maintain an active Secret or higher clearance, per contract requirements.“Outstanding Performance…Always!”Our corporate motto represents our commitment to build long-term relationships with both our clients and our employees by providing the highest quality service in everything we do. We strive for excellence for our clients and for each other. We embrace the opportunity to hire individuals with new talents and fresh perspectives. Zantech offers competitive compensation, strong benefits, and a vacation package, as well as a fast-paced and exciting work environment. Come join our team!