DevSecOps Engineer - JobID-0331
Innovative Defense Technologies
$114,000 - $231,000 / year
Need a reasonable accommodation to apply or interview? Contact us.
JobMinglr uses automated technology to recommend jobs based on profile information and job preferences. Match Score does not determine eligibility for a position, prevent a user from viewing or applying to a job, or make hiring decisions on behalf of an employer.
Description
- All applicants must be able to obtain/maintain an active Secret U.S. Security Clearance.
- This is an on-site position. Requiring at least 3 days in office, based out of our Arlington, VA, Mount Laurel, NJ, or Fall River, MA office.
Key Responsibilities
- Design, architect, and optimize CI/CD pipelines using Jenkins, developing reusable pipeline templates and custom shared components to streamline execution across all software teams
- Hard code and automate advanced security controls (SAST, SCA, container scanning, SBOM generation, secrets detection) directly into the pipeline fabric, establishing guardrails that run autonomously
- Configure, scale, and secure our Software Factory platform (GitLab, JFrog Artifactory, SonarQube), managing system setups, staging and testing clusters, and automated tool backups
- Design, modularize, and maintain Infrastructure as Code (IaC) blueprints using Ansible and OpenTofu, designing automation models the DSO team, as well as other engineering teams, can use to spin up environments and deployments
- Orchestrate and optimize containerized clusters using Podman, securing cluster communications, and managing local registry synchronization.
- Own and harden DSO platform deployments in secure, air-gapped environments, including:
- packaging and deploying dependencies
- remediating environment-specific issues
- supporting repeatable software delivery without external connectivity
- collaborate with the SECOPs teams to maintain DSO platform compliance
- Automate compliance enforcement by translating DISA STIGs, NIST 800-171, and RMF controls into automated pipeline validation scripts and policy-as-code configurations
- Diagnose and remediate complex, low-level system friction points (e.g., SELinux policy denials, pipeline token validation issues, and local network/VPN bottlenecks), defining long-term fixes to prevent recurrence
- Analyze developer telemetry, feedback loops, and build metrics to proactively eliminate pipeline friction, continuously improving the overall Developer Experience (DX)
- Partner with cross-functional software, security, and systems engineering teams to establish collaborative delivery patterns and guide developers on DSO best practices
Skills, Knowledge and Expertise
- 5-7 years of professional, post-graduation experience in a DevSecOps, DevOps, Platform/Systems Engineering, or Software Engineering role with a strong emphasis on automation or platform administration
- Bachelor’s degree in Computer Science, Engineering, or a related technical field, or equivalent practical experience
- U.S. citizenship
- Ability to travel up to 10%
- Strong working knowledge of modern, secure Software Development Life Cycle (SDLC) methodologies (e.g., Agile/Scrum, branching strategies, secure code reviews, automated linting, and release packaging)
- Practical experience building and scale-optimizing CI/CD pipelines using Jenkins or some other CI/CD orchestrator (such as building custom shared libraries, declarative pipelines, or automated test hooks)
- Practical experience orchestrating containerized workloads using Podman (or Docker/Kubernetes), including network configuration, container storage, and local registry sync
- Proven capability writing and modularizing Infrastructure as Code (IaC) utilizing Ansible, OpenTofu, or some other automation technique, to deploy robust, repeatable environments
- Intermediate programming depth in Python (e.g., writing API clients, custom scripts, or automation frameworks) combined with strong Linux/Unix systems-level Bash scripting
- Strong proficiency with Git version control, including managing branch strategies, resolving merge conflicts, and utilizing Git Hooks or API-driven integrations
- Demonstrated systems-level troubleshooting skills, with the ability to diagnose root causes of low-level OS, container, or CI/CD pipeline issues
- Collaborative, enablement-focused mindset with strong communication skills, eager to mentor junior engineers and help software teams self-solve platform issues
- Experience designing Software Bill of Materials (SBOM) auditing workflows or navigating open-source license compliance (e.g., managing GPL/LGPL risks)
- Experience architecting or configuring high-performance local AI infrastructure (e.g., GPU clusters, vLLM orchestration, or vector databases like Qdrant) behind a VPN or in air-gapped setups
- Experience configuring custom pipeline diagnostics, usage telemetry, or observability stacks (Prometheus, Grafana, ELK) to monitor platform health and usage
- Active Secret or Top Secret security clearance, with practical experience applying DISA STIGs or preparing environments for CMMC audits
Benefits
- Generous benefits package
- Competitive PTO
- Paid holidays
- 401(k) with immediate vesting and matching
- 9/80 optional schedule (2nd and 4th Friday off every month)
- Tuition Assistance Reimbursement Program
- Professional Development Resources
- Pre-Tax Commuter Benefits
- Organization-Wide Monthly Tech Connect Events
- Annual Employee Recognition Awards
- Regular Social Events and Catered Lunches
Benefits
- Why Work at Innovative Defense Technologies (IDT): IDT is a growing company with a vibrant, entrepreneurial culture. We are headquartered in Arlington, VA with additional offices in Fall River, MA; Mount Laurel, NJ; and San Diego, CA. At each location, our employees work together in a modern, snack-filled, and social office space, designing innovative solutions for our defense industry customers. We offer employees competitive pay and benefits including: Generous benefits package Competitive PTO Paid holidays 401(k) with immediate vesting and matching 9/80 optional schedule (2nd and 4th Friday off every month) Tuition Assistance Reimbursement Program Professional Development Resources Pre-Tax Commuter Benefits Organization-Wide Monthly Tech Connect Events Annual Employee Recognition Awards Regular Social Events and Catered Lunches EEO Statement: IDT is an Equal Opportunity employer.
About this role
Innovative Defense Technologies is building an internal DevSecOps platform to enable their software teams to deliver secure, compliant releases at scale. This mid-level role sits at the center of that effort—you'll design and optimize CI/CD pipelines in Jenkins, architect reusable Infrastructure as Code modules using Ansible and OpenTofu, and embed security controls (SAST, SCA, container scanning, secrets detection) directly into the pipeline. You'll also configure and harden the Software Factory platform (GitLab, JFrog Artifactory, SonarQube) in air-gapped, secure environments, then translate compliance frameworks like DISA STIGs and NIST 800-171 into automated policy-as-code.
The role demands 5–7 years of hands-on DevSecOps, DevOps, or platform engineering work, with strong practical depth in Jenkins pipelines, containerization (Podman/Docker), IaC tooling, Python scripting, and Linux systems troubleshooting. You'll need a Bachelor's degree in a technical field, U.S. citizenship, and the ability to obtain and maintain a Secret clearance. Beyond the core technical skills, success here hinges on collaboration—you'll partner with security and software teams to eliminate friction, mentor junior engineers, and establish best practices across the organization.
This is a hybrid role based in Fall River, Massachusetts (or Arlington, VA or Mount Laurel, NJ), requiring at least three days on-site. The salary range is $114,000–$231,000. If you have prior clearance, experience with SBOM workflows, or hands-on familiarity with compliance audits and air-gapped deployments, you'll stand out.
This role's local market on JobMinglr
Pay for this role
$114,000 to $231,000 per year
That is the employer's posted range, and where you land in it is usually decided in one conversation. Before that conversation, run the numbers: analyze an offer for this role.
Before you apply, worth reading
How JobMinglr reads this job
Every listing here is scored against your profile before you apply: skills overlap, experience level, location and work arrangement, each weighted and explained. You see the score and the reasons, not just a list. How the matching works.