{"schemaVersion":"jobsearcher.job.v1","id":"c485c1e8ac2794c0cb7247ed","url":"https://jobsearcher.com/jobs/c485c1e8ac2794c0cb7247ed","canonicalUrl":"https://jobsearcher.com/jobs/c485c1e8ac2794c0cb7247ed","title":"DevSecOps Engineer","description":"Job Description\n\nPrimary ResponsibilityTheDevSecOps Engineershall serve as the lead technical engineer responsible for designing, implementing, securing, automating, and sustaining the cloud infrastructure supporting the Office of Naval Research (ONR) Data & Analytics environment. The DevSecOps Engineer shall lead the implementation and execution of the technical requirements identified inPWS Section 4.5 – Technical Infrastructure and Platform Support , including infrastructure automation, Continuous Integration/Continuous Deployment (CI/CD), cloud security, container orchestration, Infrastructure-as-Code (IaC), and operational sustainment of the FedRAMP High and DoD Impact Level 5 (IL5) cloud environment.The DevSecOps Engineer shall architect and maintain secure cloud infrastructure, automate deployment pipelines, support AI/ML platform integration, implement cloud-native security controls, monitor system health and security events, and ensure compliance with DoD cybersecurity requirements. This position will work closely with software developers, data engineers, cloud architects, cybersecurity personnel, and Government stakeholders to deliver resilient, scalable, and secure cloud services.Duties and Responsibilities\r\nThe DevSecOps Engineer shall:\r\nDesign, deploy, automate, and maintain secure cloud infrastructure supporting mission applications and analytics platforms.\r\nDevelop, implement, and manage automated CI/CD pipelines using tools such as Jenkins, GitLab CI/CD, or equivalent technologies.\r\nBuild and maintain Infrastructure-as-Code (IaC) solutions utilizing Terraform, Ansible, or similar automation frameworks.\r\nImplement and manage containerized application environments using Docker, Kubernetes, or comparable orchestration platforms.\r\nConfigure, monitor, and optimize cloud-native security services including Web Application Firewalls (WAF), Intrusion Detection/Prevention Systems (IDS/IPS), endpoint protection, and Security Information and Event Management (SIEM) platforms.\r\nAnalyze security logs, audit events, vulnerability reports, and SIEM alerts to identify threats, recommend mitigation strategies, and support incident response activities.\r\nSupport continuous Authority to Operate (ATO) compliance through configuration management, security patching, vulnerability remediation, and security documentation.\r\nImplement secure API management, identity and access management (IAM), secrets management, encryption, and least-privilege access controls.\r\nDevelop automated monitoring, logging, alerting, and operational dashboards to improve system reliability and performance.\r\nSupport deployment and operationalization of AI/ML platforms and services, including cloud-native machine learning environments.\r\nCollaborate with software developers, data engineers, and cloud architects to integrate security throughout the software development lifecycle (SDLC).\r\nEnsure cloud infrastructure complies with DoD cybersecurity policies, FedRAMP High requirements, DoD IL5 controls, and applicable security frameworks.\r\nSupport system scalability, resilience, disaster recovery, and operational continuity.\r\nDocument system architectures, deployment procedures, security configurations, and operational processes.Minimum Qualifications\r\nThe DevSecOps Engineer shall meet the requirements for the\"DevSecOps Engineer – Intermediate\"labor category as defined in theCHESS ITES-3Scontract vehicle and possess the following additional qualifications:\r\nSeven (7) years of combined experience in DevSecOps, DevOps, SecOps, or MLOps engineering and development.\r\nFive (5) years of hands-on experience designing, securing, implementing, and maintaining cloud environments, preferably withinAWS GovCloud ,Azure Government , or similarly regulated cloud environments.\r\nDemonstrated experience supporting cloud environments operating underFedRAMP High ,DoD Impact Level 5 (IL5) , or comparable federal security requirements.\r\nVerifiable experience on at least two (2) projects designing, implementing, and managing Continuous Integration/Continuous Deployment (CI/CD) pipelines using Jenkins, GitLab CI/CD, Azure DevOps, GitHub Actions, or equivalent technologies.\r\nDemonstrated expertise implementing and managing containerization and orchestration technologies, including Docker, Kubernetes, OpenShift, or similar platforms.\r\nHands-on experience implementing Infrastructure-as-Code (IaC) using Terraform, Ansible, CloudFormation, or comparable automation tools.\r\nExperience configuring and administering cloud-native security capabilities including Web Application Firewalls (WAF), Intrusion Detection/Prevention Systems (IDS/IPS), Security Information and Event Management (SIEM), vulnerability management, and cloud security monitoring solutions.\r\nVerifiable experience analyzing security logs, SIEM data, audit records, and threat intelligence to identify vulnerabilities, investigate security events, and implement corrective actions.\r\nExperience implementing secure Identity and Access Management (IAM), encryption, secrets management, and Zero Trust security principles.\r\nExperience supporting automated monitoring, logging, system performance optimization, and operational sustainment of enterprise cloud platforms.\r\nStrong understanding of DevSecOps best practices, secure software development lifecycle (SSDLC), and cloud security architectures.Qualifications\r\nActive Secret security clearance (required).\r\nCurrent DoD 8140 (or legacy DoD 8570) cybersecurity certification applicable to privileged access functions (e.g., Security+, CySA+, CASP+, CISSP, CCSP).\r\nAWS Certified DevOps Engineer – Professional, AWS Security Specialty, Azure DevOps Engineer Expert, Certified Kubernetes Administrator (CKA), or comparable cloud certifications.\r\nExperience supporting AI/ML environments, including AWS SageMaker, Azure Machine Learning, or similar platforms.\r\nExperience with streaming data technologies such as Apache Kafka, AWS Kinesis, or equivalent event-driven architectures.\r\nFamiliarity with NIST RMF, DISA STIGs, FedRAMP, Zero Trust Architecture, and DoD cybersecurity compliance requirements.","company":"Occam Solutions","rawCompany":"occam solutions","city":"Washington","state":"DC","isRemote":false,"isActive":false,"createdAt":"2026-11-03T01:56:31.734Z","occupations":[{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"},{"code":"15-1252.00","title":"Software Developers","slug":"software-developers"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541519","title":"Other Computer Related Services","slug":"other-computer-related-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"DevSecOps Engineer","description":"Job Description\n\nPrimary ResponsibilityTheDevSecOps Engineershall serve as the lead technical engineer responsible for designing, implementing, securing, automating, and sustaining the cloud infrastructure supporting the Office of Naval Research (ONR) Data & Analytics environment. The DevSecOps Engineer shall lead the implementation and execution of the technical requirements identified inPWS Section 4.5 – Technical Infrastructure and Platform Support , including infrastructure automation, Continuous Integration/Continuous Deployment (CI/CD), cloud security, container orchestration, Infrastructure-as-Code (IaC), and operational sustainment of the FedRAMP High and DoD Impact Level 5 (IL5) cloud environment.The DevSecOps Engineer shall architect and maintain secure cloud infrastructure, automate deployment pipelines, support AI/ML platform integration, implement cloud-native security controls, monitor system health and security events, and ensure compliance with DoD cybersecurity requirements. This position will work closely with software developers, data engineers, cloud architects, cybersecurity personnel, and Government stakeholders to deliver resilient, scalable, and secure cloud services.Duties and Responsibilities\r\nThe DevSecOps Engineer shall:\r\nDesign, deploy, automate, and maintain secure cloud infrastructure supporting mission applications and analytics platforms.\r\nDevelop, implement, and manage automated CI/CD pipelines using tools such as Jenkins, GitLab CI/CD, or equivalent technologies.\r\nBuild and maintain Infrastructure-as-Code (IaC) solutions utilizing Terraform, Ansible, or similar automation frameworks.\r\nImplement and manage containerized application environments using Docker, Kubernetes, or comparable orchestration platforms.\r\nConfigure, monitor, and optimize cloud-native security services including Web Application Firewalls (WAF), Intrusion Detection/Prevention Systems (IDS/IPS), endpoint protection, and Security Information and Event Management (SIEM) platforms.\r\nAnalyze security logs, audit events, vulnerability reports, and SIEM alerts to identify threats, recommend mitigation strategies, and support incident response activities.\r\nSupport continuous Authority to Operate (ATO) compliance through configuration management, security patching, vulnerability remediation, and security documentation.\r\nImplement secure API management, identity and access management (IAM), secrets management, encryption, and least-privilege access controls.\r\nDevelop automated monitoring, logging, alerting, and operational dashboards to improve system reliability and performance.\r\nSupport deployment and operationalization of AI/ML platforms and services, including cloud-native machine learning environments.\r\nCollaborate with software developers, data engineers, and cloud architects to integrate security throughout the software development lifecycle (SDLC).\r\nEnsure cloud infrastructure complies with DoD cybersecurity policies, FedRAMP High requirements, DoD IL5 controls, and applicable security frameworks.\r\nSupport system scalability, resilience, disaster recovery, and operational continuity.\r\nDocument system architectures, deployment procedures, security configurations, and operational processes.Minimum Qualifications\r\nThe DevSecOps Engineer shall meet the requirements for the\"DevSecOps Engineer – Intermediate\"labor category as defined in theCHESS ITES-3Scontract vehicle and possess the following additional qualifications:\r\nSeven (7) years of combined experience in DevSecOps, DevOps, SecOps, or MLOps engineering and development.\r\nFive (5) years of hands-on experience designing, securing, implementing, and maintaining cloud environments, preferably withinAWS GovCloud ,Azure Government , or similarly regulated cloud environments.\r\nDemonstrated experience supporting cloud environments operating underFedRAMP High ,DoD Impact Level 5 (IL5) , or comparable federal security requirements.\r\nVerifiable experience on at least two (2) projects designing, implementing, and managing Continuous Integration/Continuous Deployment (CI/CD) pipelines using Jenkins, GitLab CI/CD, Azure DevOps, GitHub Actions, or equivalent technologies.\r\nDemonstrated expertise implementing and managing containerization and orchestration technologies, including Docker, Kubernetes, OpenShift, or similar platforms.\r\nHands-on experience implementing Infrastructure-as-Code (IaC) using Terraform, Ansible, CloudFormation, or comparable automation tools.\r\nExperience configuring and administering cloud-native security capabilities including Web Application Firewalls (WAF), Intrusion Detection/Prevention Systems (IDS/IPS), Security Information and Event Management (SIEM), vulnerability management, and cloud security monitoring solutions.\r\nVerifiable experience analyzing security logs, SIEM data, audit records, and threat intelligence to identify vulnerabilities, investigate security events, and implement corrective actions.\r\nExperience implementing secure Identity and Access Management (IAM), encryption, secrets management, and Zero Trust security principles.\r\nExperience supporting automated monitoring, logging, system performance optimization, and operational sustainment of enterprise cloud platforms.\r\nStrong understanding of DevSecOps best practices, secure software development lifecycle (SSDLC), and cloud security architectures.Qualifications\r\nActive Secret security clearance (required).\r\nCurrent DoD 8140 (or legacy DoD 8570) cybersecurity certification applicable to privileged access functions (e.g., Security+, CySA+, CASP+, CISSP, CCSP).\r\nAWS Certified DevOps Engineer – Professional, AWS Security Specialty, Azure DevOps Engineer Expert, Certified Kubernetes Administrator (CKA), or comparable cloud certifications.\r\nExperience supporting AI/ML environments, including AWS SageMaker, Azure Machine Learning, or similar platforms.\r\nExperience with streaming data technologies such as Apache Kafka, AWS Kinesis, or equivalent event-driven architectures.\r\nFamiliarity with NIST RMF, DISA STIGs, FedRAMP, Zero Trust Architecture, and DoD cybersecurity compliance requirements.","datePosted":"2026-11-03T01:56:31.734Z","dateModified":"2026-11-03T01:56:31.734Z","hiringOrganization":{"@type":"Organization","name":"Occam Solutions","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Washington","addressRegion":"DC","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"c485c1e8ac2794c0cb7247ed"},"url":"https://jobsearcher.com/jobs/c485c1e8ac2794c0cb7247ed"}}