DevSecOps Engineer

Location: Fort Bragg, NC

Work Arrangement: On-site

Security Clearance: Active TS/SCI Required

Position Overview

We are seeking an experienced DevSecOps Engineer to engineer, secure, and sustain containerized platforms and automation pipelines supporting a Kubernetes-based Platform as a Service (PaaS) architecture.

This position operates within on-premise and air-gapped environments and combines DevOps engineering with hands-on cybersecurity implementation. The DevSecOps Engineer will build and maintain CI/CD pipelines, administer Kubernetes clusters through Rancher, manage infrastructure as code, and integrate software and hardware into isolated network environments while maintaining system security, reliability, and performance.

Key Responsibilities

• Engineer and orchestrate containerized applications, CI/CD pipelines, and monitoring solutions supporting full-stack automation.
• Develop and maintain infrastructure-as-code solutions using Terraform and Ansible.
• Administer Kubernetes clusters through Rancher and support containerized application environments.
• Manage on-premise GitLab environments and offline container registries.
• Integrate newly acquired software and hardware into existing environments while minimizing operational disruption.
• Integrate applications and software into air-gapped and isolated network environments.
• Assess software and hardware platforms and recommend appropriate cybersecurity improvements.
• Implement and maintain security controls designed to protect systems and data.
• Establish and execute testing and evaluation processes for cyberspace systems.
• Troubleshoot and resolve complex technical issues affecting on-premise systems.
• Configure, update, and manage system components to improve existing solutions.
• Develop secure automation and scripting solutions using Python.
• Design, build, and integrate APIs into automated workflows.
• Apply current DevOps, cybersecurity, infrastructure-as-code, and automated software quality assurance best practices.
• Stay current with relevant technologies, industry standards, and cybersecurity practices.

Required Qualifications

• 9+ years of demonstrated experience in DevOps engineering, systems engineering, or a related technical field.
• Hands-on experience administering on-premise GitLab and managing offline container registries.
• Hands-on experience with Rancher and Kubernetes (K8s) cluster administration.
• Experience developing and managing infrastructure as code using Terraform and Ansible.
• Strong understanding of DevOps cybersecurity practices, risk management, and operational security.
• Proficiency in secure Python programming for automation and scripting.
• Experience with Git/GitHub, automated builds, and CI/CD pipelines.
• Strong Linux system administration experience; Debian-based Linux experience is strongly preferred.
• Understanding of networking fundamentals.
• Experience integrating applications and software within air-gapped or otherwise isolated networks.
• Understanding of API design, development, and integration within automated workflows.
• Ability to troubleshoot complex systems in on-premise environments.

Preferred Qualifications

The following certifications and experience are preferred but not required:

• Experience supporting U.S. Special Operations organizations.
• CISSP or CompTIA SecurityX.
• Certified Kubernetes Administrator (CKA).
• Certified Kubernetes Application Developer (CKAD).
• Certified Kubernetes Security Specialist (CKS).
• HashiCorp Certified: Terraform Associate.
• Red Hat Certified Engineer (RHCE).
• Linux Foundation Certified System Administrator (LFCS) or CompTIA Linux+.

Education

• High school diploma or equivalent required.
• Minimum of 9 years of relevant professional experience.

Required Certification

Candidates must possess a DoD 8570 IAT Level II / DoD 8140-compliant certification, such as CompTIA Security+ or higher, at the time of start.

An Active TS/SCI Security Clearance Is Required.

Candidates who do not currently possess an active TS/SCI clearance will not meet the security requirements for this position.

NO SUBCONTRACT REQUIREMENT:

No third-party applicants will be considered. If you are a third-party contracting company, please do not respond to this position.