DevSecOps Engineer

Overview In this role you will architect, operate, and optimize DevSecOps pipelines for Everforth ECS products across NIPRNet, aligning with DHS missions and senior leadership. You will work closely with software, cybersecurity, and infrastructure teams to maintain mission alignment and resilience. You will pioneer pipeline architectures, security tool integrations, and policy-as-code practices that enable secure, automated delivery. This position offers impact at scale within government-focused domains and a chance to shape secure, cross-domain delivery processes. You will join a mission-driven team that values automation, security, and operational readiness. ResponsibilitiesArchitect, operate, and optimize advanced DevSecOps pipelines across NIPRNet for DHS missions and executive leadershipDesign core pipeline architectures, domain artifact flows, and security tool integrations (GitLab, Jenkins, SonarQube, Nexus, Harbor, Kubernetes, Terraform)Lead pipeline architecture development, author process docs, coordinate with software, cybersecurity, and infrastructure teamsServe as escalation point for complex pipeline failures and vulnerability triage across multi-network deliveryMaintain mastery of CI tooling, security scanning, software composition analysis, and compliance automationAuthor standards and automation: pipeline YAML, DSL, policy-as-code, artifact signing, and automated workflowsPilot security-as-code techniques and cross-domain validation in labs before productionIntegrate scanning, SBOM generation, compliance validation, and automated security gates (Anchore, Trivy, OpenSCAP, Sysdig)Monitor pipeline performance (success rates, deployment frequency, MTTR, defect recurrence) and recommend optimizationsProduce technical assessments, architecture updates, and leadership reports to strengthen automation and readinessPerform other duties as assigned Key requirementsBachelor’s degree in Computer Science, Cybersecurity, Software Engineering, or Information TechnologyUS Citizen; must obtain and maintain a Public TrustIAT III-level security certifications (CASP+ CE, CISSP or Associate, GIAC GCED, GCIH, or Cisco CCNP Security)Minimum 5 years designing, implementing, and maintaining enterprise-scale DevSecOps pipelines in multi-domain/classified environmentsProven expertise integrating CI/CD tools with security-as-code frameworks (GitLab, Jenkins, SonarQube, Nexus, Harbor, Kubernetes, Terraform)Demonstrated ability to lead cross-functional teams, author process docs, and escalate complex pipeline issues and vulnerability triageStrong problem-solving and decision-making abilities with cost-benefit judgmentExcellent interpersonal and communication skills with diverse stakeholderscross-functional collaborationstrong communicationproblem-solvingGitLabJenkinsSonarQube