Sr. DevSecOps
Designs, secures, and automates cloud infrastructure and CI/CD pipelines in Azure for DoD mission-critical data/ML systems, ensuring compliance with DoD security protocols.
- Compensation
- Not disclosed
- Location
- Washington, DC
- Work setup
- Onsite
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Must have
- Eligible for Secret clearance
- Current Security+ certification (or obtain within 30 days)
- Bachelor’s degree in Computer Science, Engineering, or related field with 5+ years of DevOps experience OR 8+ years of relevant DevOps/Cloud engineering experience
- Experience with Azure DevOps implementing DevSecOps pipelines in commercial and classified environments
- Experience with container ecosystem (Kubernetes, Helm, Docker)
- Infrastructure as Code (IaC) automation
- Experience with Azure Commercial Cloud and Azure Government Cloud
- Strong scripting skills in Python or other languages
Nice to have
- Experience implementing DoD Security Technical Implementation Guides (STIGs)
- Strong understanding of the Risk Management Framework (RMF)
- Knowledge of DoD security documentation requirements
- Experience with security scanning tools (Nessus, SonarQube, Aqua Security)
- Database administration (SQL, NoSQL, Vector)
- Elasticsearch/OpenSearch administration
- Version control experience
- Linux administration
- Experience with data engineering tools (Databricks, Spark, Hadoop, data warehousing)
- Familiarity with machine learning concepts and tools
- Experience with data visualization tools (Power BI, Tableau)
- Relevant cloud security certifications (e.g., Azure Security Engineer Associate)
Full description
hatch I.T. is partnering with Expression to find a Senior DevSecOps. See details below:
About The Role:
Expression is seeking a Senior DevOps Engineer to support the modernization of Data Systems with a primary focus on DevSecOps in Azure Cloud. This role involves designing, implementing, and maintaining secure CI/CD pipelines and cloud infrastructure within sensitive and classified environments to ensure delivery of mission-critical data analysis and machine learning applications. The ideal candidate will have extensive experience with Azure Cloud, Azure DevOps and other modern DevSecOps tooling, DoD compute environments and security compliance and modern infrastructure automation practices.
About the Company:
Founded in 1997 and headquartered in Washington DC, Expression provides data fusion, data analytics, software engineering, information technology, and electromagnetic spectrum management solutions to the U.S. Department of Defense, Department of State, and national security community. Expression’s “Perpetual Innovation” culture focuses on creating immediate and sustainable value for their clients via agile delivery of tailored solutions built through constant engagement with their clients. Expression was ranked #1 on the Washington Technology 2018's Fast 50 list of fastest growing small business Government contractors and a Top 20 Big Data Solutions Provider by CIO Review.
Responsibilities:
Infrastructure & Cloud Management:
- Design, deploy, and manage Azure Cloud architecture within DoD guidelines
- Manage Infrastructure as Code (IaC) deployments
- Ensure compliance with DoD security requirements and best practices
- Lead cross-functional teams in defining secure infrastructure requirements
CI/CD Pipeline Development:
- Develop and maintain secure CI/CD pipelines
- Implement deployment strategies aligned with DoD security protocols
- Automate build, test, and deployment processes using Azure DevOps Pipelines
- Ensure code security through pipeline integration
Security & Compliance:
- Implement and maintain security controls per DoD requirements
- Conduct security assessments and vulnerability remediation
- Collaborate with security teams on RMF documentation
- Ensure continuous compliance with DoD security standards
System Reliability:
- Monitor system performance and security
- Implement logging and monitoring solutions Lead incident response and problem resolution