{"schemaVersion":"jobsearcher.job.v1","id":"b617ccec2fa1d2768eee83d9","url":"https://jobsearcher.com/jobs/b617ccec2fa1d2768eee83d9","canonicalUrl":"https://jobsearcher.com/jobs/b617ccec2fa1d2768eee83d9","title":"Senior DevSecOps Engineer - Reston, VA","description":"The following position is available to Veterans, Transitioning Military, National Guard and Reserve Members, Military Spouses, Wounded Warriors, and their Caregivers.\nThis role is \"On-Site\".\nResponsibilities\nNoblis is looking for a highly experienced DevSecOps Engineer with an active Top Secret/SCI clearance with Polygraph to support critical national security missions.\nIn this role, you will embed security practices into the DevOps lifecycle, ensuring security is integrated at every stage of software development. You’ll collaborate across development, operations, and security teams to close gaps and promote a culture of shared accountability for security.\nThe ideal candidate brings hands‑on experience designing secure CI/CD pipelines, automating security controls, securing Kubernetes environments, and guiding or mentoring junior engineers.\nPosted Salary Range USD $120,700.00 - USD $188,725.00 /Yr.\nJob Responsibilities:\n\nDesigning, building, maintaining, and optimizing CI/CD pipelines supporting automated build, test, security scan, and deployment processes.\nIntegrating automated testing, security scanning, and compliance validation into pipeline execution to support secure delivery practices.\nDeveloping and managing IaC using Terraform or CloudFormation, implementing security guardrails and scanning to ensure compliance and prevent misconfigurations.\nImplementing security best practices for Docker, Kubernetes, and EKS, including image hardening, admission controls, policy-as-code, and runtime security.\nPartnering with teams to design and enforce AWS/Azure security guardrails, including IAM least-privilege, network controls, and encryption standards.\nOperationalizing vulnerability management by identifying, prioritizing, and remediating security threats across applications and infrastructure.\nTranslating security compliance requirements into automated security controls and audit-ready evidence.\nEnsuring that all software development and deployment processes comply with relevant security policies, standards, and regulations.\nActing as a security champion, mentoring junior engineers and developers on secure coding practices and DevSecOps principles.\n\nRequired Experience\nRequired Qualifications\n\nUS Citizenship is required\nActive Top-Secret SCI (TS/SCI) with Polygraph\nBachelor’s OR Master’s degree with 7 years of related experience; OR associate’s degree with 11 years of related experience; OR High School diploma/GED with 14 years of related experience.\nProficiency in programming languages such as Python, and scripting languages for automation tasks (e.g., Bash).\nFamiliarity with CI/CD tools (e.g., GitLab CI, GitHub Actions), container orchestration (e.g., Kubernetes, EKS), and infrastructure as code (e.g., Terraform, Ansible).\nSkills in security cloud environments, including cloud service providers (e.g., AWS, Azure, GCP), and understanding of cloud‑native security tools and practices.\nAbility to identify security issues and vulnerabilities and develop effective solutions.\nAbility to distill technical complexities into actionable guidance for development teams.\n\nPreferred Experience\nDesired Qualifications\n\nAWS Certification , including AWS Certified DevOps Engineer or AWS Certified Solutions Architect Certification\nExperience with OPA/Gatekeeper or Kyverno.\nKnowledge of SBOM generation, artifact signing (cosign), and provenance concepts.\nFamiliarity with NIST SP 800-171 or CMMC expectations.\nStrong analytical skills to diagnose complex security issues spanning multiple technologies.\n\n#J-18808-Ljbffr","company":"Msccn","rawCompany":"msccn","city":"Reston","state":"VA","isRemote":false,"isActive":false,"createdAt":"2026-10-03T03:27:50.909Z","occupations":[{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1252.00","title":"Software Developers","slug":"software-developers"},{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"},{"code":"513210","title":"Software Publishers","slug":"software-publishers"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Senior DevSecOps Engineer - Reston, VA","description":"The following position is available to Veterans, Transitioning Military, National Guard and Reserve Members, Military Spouses, Wounded Warriors, and their Caregivers.\nThis role is \"On-Site\".\nResponsibilities\nNoblis is looking for a highly experienced DevSecOps Engineer with an active Top Secret/SCI clearance with Polygraph to support critical national security missions.\nIn this role, you will embed security practices into the DevOps lifecycle, ensuring security is integrated at every stage of software development. You’ll collaborate across development, operations, and security teams to close gaps and promote a culture of shared accountability for security.\nThe ideal candidate brings hands‑on experience designing secure CI/CD pipelines, automating security controls, securing Kubernetes environments, and guiding or mentoring junior engineers.\nPosted Salary Range USD $120,700.00 - USD $188,725.00 /Yr.\nJob Responsibilities:\n\nDesigning, building, maintaining, and optimizing CI/CD pipelines supporting automated build, test, security scan, and deployment processes.\nIntegrating automated testing, security scanning, and compliance validation into pipeline execution to support secure delivery practices.\nDeveloping and managing IaC using Terraform or CloudFormation, implementing security guardrails and scanning to ensure compliance and prevent misconfigurations.\nImplementing security best practices for Docker, Kubernetes, and EKS, including image hardening, admission controls, policy-as-code, and runtime security.\nPartnering with teams to design and enforce AWS/Azure security guardrails, including IAM least-privilege, network controls, and encryption standards.\nOperationalizing vulnerability management by identifying, prioritizing, and remediating security threats across applications and infrastructure.\nTranslating security compliance requirements into automated security controls and audit-ready evidence.\nEnsuring that all software development and deployment processes comply with relevant security policies, standards, and regulations.\nActing as a security champion, mentoring junior engineers and developers on secure coding practices and DevSecOps principles.\n\nRequired Experience\nRequired Qualifications\n\nUS Citizenship is required\nActive Top-Secret SCI (TS/SCI) with Polygraph\nBachelor’s OR Master’s degree with 7 years of related experience; OR associate’s degree with 11 years of related experience; OR High School diploma/GED with 14 years of related experience.\nProficiency in programming languages such as Python, and scripting languages for automation tasks (e.g., Bash).\nFamiliarity with CI/CD tools (e.g., GitLab CI, GitHub Actions), container orchestration (e.g., Kubernetes, EKS), and infrastructure as code (e.g., Terraform, Ansible).\nSkills in security cloud environments, including cloud service providers (e.g., AWS, Azure, GCP), and understanding of cloud‑native security tools and practices.\nAbility to identify security issues and vulnerabilities and develop effective solutions.\nAbility to distill technical complexities into actionable guidance for development teams.\n\nPreferred Experience\nDesired Qualifications\n\nAWS Certification , including AWS Certified DevOps Engineer or AWS Certified Solutions Architect Certification\nExperience with OPA/Gatekeeper or Kyverno.\nKnowledge of SBOM generation, artifact signing (cosign), and provenance concepts.\nFamiliarity with NIST SP 800-171 or CMMC expectations.\nStrong analytical skills to diagnose complex security issues spanning multiple technologies.\n\n#J-18808-Ljbffr","datePosted":"2026-10-03T03:27:50.909Z","dateModified":"2026-10-03T03:27:50.909Z","hiringOrganization":{"@type":"Organization","name":"Msccn","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Reston","addressRegion":"VA","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"b617ccec2fa1d2768eee83d9"},"url":"https://jobsearcher.com/jobs/b617ccec2fa1d2768eee83d9"}}