DevSecOps Engineer

DevSecOps Engineer - JobID-0030 Department: Engineering Employment Type: Full Time Location: Arlington, VA Compensation: $74,000 - $150,000 / year Description IDT provides cloud‑based integration, automated testing, and data analysis for complex, mission‑critical systems in the U.S. Department of Defense. We are seeking a DevSecOps Engineer to join our team in Arlington, VA. The DevSecOps team is central to this mission, integrating security, automation, and operational practices into the software development lifecycle. We provide a standardized developer platform that includes CI/CD pipelines, security scanning, infrastructure automation, and developer tooling across both connected and classified environments. A portion of this work occurs in air‑gapped environments, where automation, repeatability, and disciplined processes are critical. In this role, you will: Improve the developer experience by reducing friction in CI/CD pipelines and platform workflows Help ensure software delivered to classified environments meets strict security and compliance requirements Contribute to a repeatable, scalable Software Factory that operates consistently across connected and air‑gapped environments Support engineers across multiple programs by providing reliable tooling, environments, and guidance Clearance & Location Requirements All applicants must be able to obtain/maintain an active Secret U.S. Security Clearance. This is an on‑site position. Requires at least 2 days in office, based out of our Arlington, VA location. What You Will Do Build, maintain, and troubleshoot CI/CD pipelines using tools such as GitLab CI and Jenkins, following established enterprise patterns Integrate and operate automated security controls within pipelines, including SAST, SCA, container scanning, SBOM generation, and secrets detection Support and maintain core Software Factory tooling (GitLab, artifact repositories, scanning tools, CI/CD infrastructure) Develop and update Infrastructure as Code (IaC) using tools such as Ansible and Terraform, leveraging standardized templates Deploy, configure, and maintain containerized workloads using Podman and Kubernetes (RKE2 or similar) Operate and support DevSecOps platforms within air‑gapped classified environments, including Packaging and deploying dependencies Troubleshooting environment‑specific issues Supporting repeatable software delivery without external connectivity Assist in enforcing compliance requirements (e.g., NIST 800‑171, DISA STIGs, RMF) through automation and pipeline controls Investigate and resolve technical issues across CI/CD pipelines, infrastructure, and tooling, documenting root causes and solutions Gather developer feedback and identify opportunities to improve platform usability, performance, and reliability Collaborate with software engineers, security teams, and infrastructure teams to support coordinated delivery efforts Who You Are (Required) 1+ years of professional software or technical experience Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent professional experience U.S. citizenship Ability to travel up to 10% Experience in software development processes Experience with CI/CD concepts and tools (e.g., Jenkins, GitLab CI, CircleCI) Familiarity with containerization technologies such as Podman and Kubernetes orchestration Understanding of Infrastructure as Code principles and tools (Terraform, Ansible) Basic scripting and programming skills (Python, Bash) Familiarity with version control systems, particularly Git Strong problem‑solving skills and ability to work collaboratively within a team Excellent communication skills and a desire to learn and grow What Makes You Stand Out Experience working in a DevSecOps or DevOps role Hands‑on experience with cloud platforms/hypervisors (AWS, vCenter) Familiarity with secure software development practices and automated security testing tools Knowledge of monitoring, logging, and alerting tools (Prometheus, Grafana, ELK Stack) Experience working in defense, government, or other mission‑critical domains Familiarity with DoD compliance frameworks such as NIST, DISA STIGs, or RMF Compensation $74,000–$116,000 or $90,000–$150,000 per year. Actual compensation may vary based on experience, skills, and education. Paid commissions, bonuses, tips, or other benefits are not included in the posted range. Benefits Generous benefits package Competitive PTO Paid holidays 401(k) with immediate vesting and matching 9/80 optional schedule (2nd and 4th Friday off every month) Tuition Assistance Reimbursement Program Professional Development Resources Pre‑tax commuter benefits Organization‑wide monthly tech connect events Annual employee recognition awards Regular social events and catered lunches EEO Statement IDT is an Equal Opportunity employer. #J-18808-Ljbffr