Lead DevSecOps Engineer and Application Administrator
Lead DevSecOps Engineer owning the CATENA Army supply chain risk dashboard end-to-end: building features, deploying to the AI2C hosting environment, managing RMF/ATO security compliance, Keycloak SSO/MFA identity workflows, and backup/disaster recovery. On-site in Huntsville, AL; 5+ years of DevSecOps/software experience required.
- Compensation
- Not disclosed
- Location
- Huntsville, AL
- Work setup
- Not specified
- Seniority
- Lead
- Employment
- Full time
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Must have
- Bachelor's degree in Computer Science, Software Engineering, Information Systems, Cybersecurity, or related technical discipline (or equivalent practical experience)
- 5+ years combined experience in software development, application administration, and DevSecOps in enterprise or defense environments
- Hands-on experience integrating applications with Keycloak, OAuth 2.0, OpenID Connect (OIDC), or SAML 2.0
- Experience implementing DoD/Army-compliant PKI, CAC/PIV-based MFA, and SSO architectures
- Familiarity with DoD RMF, NIST SP 800-53, DISA STIGs, and vulnerability scanning/management tools (e.g., SonarQube, Fortify, Anchore, Prisma Cloud, ACAS/Tenable)
- Direct experience authoring and managing Plan of Action and Milestones (POA&M)
- Experience interfacing directly with an ISSM / ISSO
- Proficiency in container technologies (Docker, Podman) and orchestration (Kubernetes, Red Hat OpenShift)
- Working knowledge of modern GitOps and CI/CD pipeline automation (GitLab CI, GitHub Actions, or Jenkins)
- Experience managing database backends (e.g., PostgreSQL, Elasticsearch, MongoDB) with automated backup scripts, snapshots, and recovery verification
Nice to have
- Prior experience collaborating with or deploying onto AI2C or Army enterprise cloud environments (e.g., cARMY)
- Active DoD 8570/8140 IAT Level II or III certification (e.g., Security+ CE, CySA+, CASP+, CISSP)
- Familiarity with supply chain risk management (SCRM), SBOM analysis, or logistics analytics
- Active Secret or higher security clearance
Full description
501747 Lead DevSecOps Engineer & Application Administrator (CATENA Dashboard)
Work Location: Huntsville, AL
Schedule: Full-time 40 hrs. per week, 8 hours per day (remote work is not authorized).
Relocation: Negotiable
Position Overview
IronMountain Solutions is seeking a highly skilled, mission-focused Lead DevSecOps Engineer & Application Administrator to serve as the primary technical point of contact for GOTS - cARMY Azure Cloud (Critical Asset Tracking & Enterprise Node Analysis), a mission-critical supply chain risk management dashboard.
In this role, you will hold end-to-end technical ownership of the GOTS - cArmy Azure Cloud platform—from implementing new capabilities and maintaining codebase health to coordinating deployment operations within the Artificial Intelligence Integration Center (AI2C) hosting environment. You will champion the application's cybersecurity posture, managing vulnerability remediation, enforcing Army-approved identity/access workflows, orchestrating continuous security scanning, and ensuring rigorous data protection and disaster recovery verification.
This position involves assisting in the development and coordination of Contracts Requirements Packages (CRP) and Performance Work Statements (PWS), assisting Army decision makers with contracting strategy development, and working with the Government customer through numerous parallel contracting activities in a dynamic and fast-paced environment.
Key Responsibilities
1. Dashboard Development & Codebase Stewardship
- Serve as the principal technical authority and point person for the GOTS / cARMY Azure Cloud dashboard.
- Design, build, and deploy enhancements, integrating new functional modules and refining existing features based on stakeholder feedback.
- Maintain clean, documented, and version-controlled application codebases across all environments using modern CI/CD pipelines.
- Ensure application performance, responsiveness, high availability, and seamless data visualization for supply chain risk intelligence.
2. Environment Hosting & AI2C Collaboration
- Serve as the primary technical liaison to the Artificial Intelligence Integration Center (AI2C) platform and infrastructure teams.
- Coordinate deployment, scaling, containerization, and configuration of the GOTS / cARMY Azure Cloud within the AI2C enterprise hosting infrastructure.
- Align development sprints with AI2C platform maintenance windows, runtime prerequisites, and infrastructure governance policies.