{"schemaVersion":"jobsearcher.job.v1","id":"b4608fa13f865f8cededc8a4","url":"https://jobsearcher.com/jobs/b4608fa13f865f8cededc8a4","canonicalUrl":"https://jobsearcher.com/jobs/b4608fa13f865f8cededc8a4","title":"Principal DevSecOps Engineer","description":"This position requires an active TS/SCI clearance with a current Full Scope Polygraph at the time of application. Due to the nature of the work and U.S. Government contractual requirements, applicants must be U.S. citizens and must be able to maintain the required clearance for the duration of employment. Candidates without an active in-scope clearance and polygraph cannot be considered, and we are unable to sponsor clearances for this role.\r\nAbout the RoleAgentic Defense Solutions, Inc. is seeking a Principal DevSecOps Engineer to lead the team that builds, secures, and operates the delivery pipeline and cloud infrastructure behind large-scale data ingest and analytics platforms in accredited environments.\r\nThis is a dual-track role. Roughly [60]% of your time is hands‑on engineering: you will design the pipelines, write the automation, and own the architecture. The remaining [40]% is leadership: you will manage a team of engineers, own their growth and performance, plan staffing against contract scope, and serve as a senior technical voice with the government customer.\r\nThe distinguishing requirement is that security is your job, not the job of a team you hand off to. We are looking for someone who builds pipelines where hardening, scanning, and control evidence are automated products of the build itself — and who can then sit across from an Authorizing Official and defend how it works.\r\nWhat You’ll DoEngineering & ArchitectureOwn the architecture of the CI/CD pipeline supporting multiple microservice development teams — build, artifact management, automated test and security gating, and promotion through environments to production.\r\nOwn infrastructure-as-code and configuration management; environment builds are reproducible, version-controlled artifacts, never hand‑tuned systems.\r\nDesign and operate automated deployments of large‑scale distributed data and AI infrastructure including capacity planning, scaling policy, and upgrade strategy.\r\nImplement low‑and zero‑downtime deployment strategies with automated rollback driven by health and performance signals.\r\nBuild self‑healing automation: instrument the platform for known instability patterns and implement corrective actions that fire automatically instead of paging a human.\r\nEngineer and tune cloud infrastructure (compute, object storage, load balancing, autoscaling, monitoring, notification) for throughput, resilience, and cost.\r\nBuild and maintain observability — metrics, logging, distributed tracing, alerting — and drive down mean time to detection and recovery.\r\nSecurity EngineeringEmbed security throughout the pipeline: SAST, DAST, software composition analysis, secrets scanning, IaC scanning, and container image scanning, with risk‑based gating and a defensible exception process.\r\nAutomate system hardening — STIG and benchmark application, drift detection, and remediation as code rather than as a checklist.\r\nOwn supply‑chain integrity: SBOM generation, dependency provenance, artifact signing, and trusted base image management.\r\nDesign and operate secrets and key management (vaulting, rotation, brokered credentials); eliminate static credentials from the pipeline.\r\nImplement container and orchestration security — image hardening, admission control, network policy, runtime detection.\r\nDrive vulnerability management end to end: discovery, triage, patch automation, and closure tracking against POA&M commitments.\r\nImplement NIST SP 800‑53 controls as automated, continuously evidenced capabilities; generate accreditation artifacts from pipeline telemetry rather than assembling them by hand.\r\nPartner with ISSM/ISSO staff and interface directly with the SCA and Authorizing Official on control implementation, risk positions, and the path toward continuous ATO.\r\nLead threat modeling of the build and deployment pipeline itself, and remediate what it surfaces.\r\nManage a team of [4–8] DevSecOps and platform engineers: set direction, assign work, review output, and hold the technical bar.\r\nOwn performance management for the team — goal setting, regular feedback, formal reviews, promotion and compensation recommendations, and corrective action when needed.\r\nOwn career development: identify growth paths, assign stretch work, and manage the team's training and certification plan (including clearance and 8140 currency).\r\nLead technical hiring for the team — define requirements, interview, assess, and close candidates in a very constrained cleared labor market.\r\nPlan staffing and labor allocation against contract scope and funding; forecast needs and flag gaps to program management before they become schedule risk.\r\nContribute to budget planning, level‑of‑effort estimation, and basis‑of‑estimate development; manage subcontractor or teammate technical scope where applicable.\r\nServe as a senior technical interface to the government customer on architecture, roadmap, operational status, and security posture.\r\nEstablish engineering standards, reference patterns, and documentation that outlast any individual on the team.\r\nSupport capture and proposal efforts as a technical SME, including solution architecture and technical volume input.\r\nRequired QualificationsActiveTS/SCI with Full Scope Polygraph.\r\n12+ yearsof progressive IT/engineering experience\r\nMinimum6 yearsin DevOps, DevSecOps, platform engineering, or SRE, including direct ownership of production CI/CD pipelines.\r\nMinimum3 yearsof formal or acknowledged technical leadership — managing engineers, leading a team, or serving as the technical authority others elevate to. Direct people‑management experience strongly preferred.\r\nHands‑on depth building and operating CI/CD toolchains — e.g.,Jenkins (or GitLab CI/equivalent), Git/GitLab, an artifact repository such as Nexus or Artifactory, and configuration management such asAnsible.\r\nProduction experience withAWScore services (EC2, S3, ELB/ALB, Auto Scaling, CloudWatch, SNS, IAM) and with automating their provisioning.\r\nDemonstrated experience deploying and operatingat least one large‑scale distributed data or AI technology in production\r\nDemonstrated experience integratingsecurity tooling into a delivery pipeline(SAST/DAST/SCA, image scanning, compliance scanning) with meaningful gating.\r\nStrong automation engineering inPythonand shell; you write and maintain real tooling, not just glue.\r\nWorking knowledge ofNIST SP 800-53, the RMF lifecycle, and STIG application in a classified or otherwise regulated environment.\r\nExperience deploying and operatingmicroservice architectures, including service discovery, gateway/routing patterns, and inter‑service resilience.\r\nExperience taking a system toATO in a cloud environment, or standing up acontinuous ATO (cATO)pipeline.\r\nInfrastructure-as-code with Terraform, CloudFormation, or equivalent; compliance-as-code with InSpec, OpenSCAP, or equivalent.\r\nAbout Agentic Defense Solutions IncAgentic Defense Solutions exists to solve the real problem in mission‑critical AI: not better models, but the operational trust layer that makes AI governable, auditable, and safe to deploy in high‑consequence environments.\r\nOur MissionMost people think the challenge in mission‑critical AI is better models. It isn't. The real problem is there is no control plane for how AI reasons, makes decisions, and executes operations in high‑consequence environments.\r\nAgentic Defense Solutions builds the ARIA product family: the operational trust layer for AI where decisions have real‑world impact. From the ARIA Platform foundation to the ARIA Hermes application, we provide the infrastructure that makes AI governable, auditable, and safe to deploy so that warfighters, analysts, operators, and decision‑makers can leverage AI with confidence.\r\nWe believe that AI accountability shouldn't be an afterthought. It should be the foundation. ARIA enforces policy, keeps an immutable audit trail, supports human‑in‑the‑loop, and is built for air‑gapped and classified deployment from day one.#J-18808-Ljbffr","company":"Agentic Defense Solutions","rawCompany":"agentic defense solutions","city":"Tysons Corner","state":"VA","isRemote":false,"isActive":false,"createdAt":"2026-10-04T02:10:47.380Z","occupations":[{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"},{"code":"15-1252.00","title":"Software Developers","slug":"software-developers"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"},{"code":"513210","title":"Software Publishers","slug":"software-publishers"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Principal DevSecOps Engineer","description":"This position requires an active TS/SCI clearance with a current Full Scope Polygraph at the time of application. Due to the nature of the work and U.S. Government contractual requirements, applicants must be U.S. citizens and must be able to maintain the required clearance for the duration of employment. Candidates without an active in-scope clearance and polygraph cannot be considered, and we are unable to sponsor clearances for this role.\r\nAbout the RoleAgentic Defense Solutions, Inc. is seeking a Principal DevSecOps Engineer to lead the team that builds, secures, and operates the delivery pipeline and cloud infrastructure behind large-scale data ingest and analytics platforms in accredited environments.\r\nThis is a dual-track role. Roughly [60]% of your time is hands‑on engineering: you will design the pipelines, write the automation, and own the architecture. The remaining [40]% is leadership: you will manage a team of engineers, own their growth and performance, plan staffing against contract scope, and serve as a senior technical voice with the government customer.\r\nThe distinguishing requirement is that security is your job, not the job of a team you hand off to. We are looking for someone who builds pipelines where hardening, scanning, and control evidence are automated products of the build itself — and who can then sit across from an Authorizing Official and defend how it works.\r\nWhat You’ll DoEngineering & ArchitectureOwn the architecture of the CI/CD pipeline supporting multiple microservice development teams — build, artifact management, automated test and security gating, and promotion through environments to production.\r\nOwn infrastructure-as-code and configuration management; environment builds are reproducible, version-controlled artifacts, never hand‑tuned systems.\r\nDesign and operate automated deployments of large‑scale distributed data and AI infrastructure including capacity planning, scaling policy, and upgrade strategy.\r\nImplement low‑and zero‑downtime deployment strategies with automated rollback driven by health and performance signals.\r\nBuild self‑healing automation: instrument the platform for known instability patterns and implement corrective actions that fire automatically instead of paging a human.\r\nEngineer and tune cloud infrastructure (compute, object storage, load balancing, autoscaling, monitoring, notification) for throughput, resilience, and cost.\r\nBuild and maintain observability — metrics, logging, distributed tracing, alerting — and drive down mean time to detection and recovery.\r\nSecurity EngineeringEmbed security throughout the pipeline: SAST, DAST, software composition analysis, secrets scanning, IaC scanning, and container image scanning, with risk‑based gating and a defensible exception process.\r\nAutomate system hardening — STIG and benchmark application, drift detection, and remediation as code rather than as a checklist.\r\nOwn supply‑chain integrity: SBOM generation, dependency provenance, artifact signing, and trusted base image management.\r\nDesign and operate secrets and key management (vaulting, rotation, brokered credentials); eliminate static credentials from the pipeline.\r\nImplement container and orchestration security — image hardening, admission control, network policy, runtime detection.\r\nDrive vulnerability management end to end: discovery, triage, patch automation, and closure tracking against POA&M commitments.\r\nImplement NIST SP 800‑53 controls as automated, continuously evidenced capabilities; generate accreditation artifacts from pipeline telemetry rather than assembling them by hand.\r\nPartner with ISSM/ISSO staff and interface directly with the SCA and Authorizing Official on control implementation, risk positions, and the path toward continuous ATO.\r\nLead threat modeling of the build and deployment pipeline itself, and remediate what it surfaces.\r\nManage a team of [4–8] DevSecOps and platform engineers: set direction, assign work, review output, and hold the technical bar.\r\nOwn performance management for the team — goal setting, regular feedback, formal reviews, promotion and compensation recommendations, and corrective action when needed.\r\nOwn career development: identify growth paths, assign stretch work, and manage the team's training and certification plan (including clearance and 8140 currency).\r\nLead technical hiring for the team — define requirements, interview, assess, and close candidates in a very constrained cleared labor market.\r\nPlan staffing and labor allocation against contract scope and funding; forecast needs and flag gaps to program management before they become schedule risk.\r\nContribute to budget planning, level‑of‑effort estimation, and basis‑of‑estimate development; manage subcontractor or teammate technical scope where applicable.\r\nServe as a senior technical interface to the government customer on architecture, roadmap, operational status, and security posture.\r\nEstablish engineering standards, reference patterns, and documentation that outlast any individual on the team.\r\nSupport capture and proposal efforts as a technical SME, including solution architecture and technical volume input.\r\nRequired QualificationsActiveTS/SCI with Full Scope Polygraph.\r\n12+ yearsof progressive IT/engineering experience\r\nMinimum6 yearsin DevOps, DevSecOps, platform engineering, or SRE, including direct ownership of production CI/CD pipelines.\r\nMinimum3 yearsof formal or acknowledged technical leadership — managing engineers, leading a team, or serving as the technical authority others elevate to. Direct people‑management experience strongly preferred.\r\nHands‑on depth building and operating CI/CD toolchains — e.g.,Jenkins (or GitLab CI/equivalent), Git/GitLab, an artifact repository such as Nexus or Artifactory, and configuration management such asAnsible.\r\nProduction experience withAWScore services (EC2, S3, ELB/ALB, Auto Scaling, CloudWatch, SNS, IAM) and with automating their provisioning.\r\nDemonstrated experience deploying and operatingat least one large‑scale distributed data or AI technology in production\r\nDemonstrated experience integratingsecurity tooling into a delivery pipeline(SAST/DAST/SCA, image scanning, compliance scanning) with meaningful gating.\r\nStrong automation engineering inPythonand shell; you write and maintain real tooling, not just glue.\r\nWorking knowledge ofNIST SP 800-53, the RMF lifecycle, and STIG application in a classified or otherwise regulated environment.\r\nExperience deploying and operatingmicroservice architectures, including service discovery, gateway/routing patterns, and inter‑service resilience.\r\nExperience taking a system toATO in a cloud environment, or standing up acontinuous ATO (cATO)pipeline.\r\nInfrastructure-as-code with Terraform, CloudFormation, or equivalent; compliance-as-code with InSpec, OpenSCAP, or equivalent.\r\nAbout Agentic Defense Solutions IncAgentic Defense Solutions exists to solve the real problem in mission‑critical AI: not better models, but the operational trust layer that makes AI governable, auditable, and safe to deploy in high‑consequence environments.\r\nOur MissionMost people think the challenge in mission‑critical AI is better models. It isn't. The real problem is there is no control plane for how AI reasons, makes decisions, and executes operations in high‑consequence environments.\r\nAgentic Defense Solutions builds the ARIA product family: the operational trust layer for AI where decisions have real‑world impact. From the ARIA Platform foundation to the ARIA Hermes application, we provide the infrastructure that makes AI governable, auditable, and safe to deploy so that warfighters, analysts, operators, and decision‑makers can leverage AI with confidence.\r\nWe believe that AI accountability shouldn't be an afterthought. It should be the foundation. ARIA enforces policy, keeps an immutable audit trail, supports human‑in‑the‑loop, and is built for air‑gapped and classified deployment from day one.#J-18808-Ljbffr","datePosted":"2026-10-04T02:10:47.380Z","dateModified":"2026-10-04T02:10:47.380Z","hiringOrganization":{"@type":"Organization","name":"Agentic Defense Solutions","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Tysons Corner","addressRegion":"VA","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"b4608fa13f865f8cededc8a4"},"url":"https://jobsearcher.com/jobs/b4608fa13f865f8cededc8a4"}}