Devsecops Engineer

Position Summary -------------------- MAG is recruiting for a **DevSecOps Engineer** who will enable rapid, secure delivery of tactical capabilities through world-class automation. You'll build the infrastructure and pipelines that allow a small team to deliver like a large organization while maintaining security in contested environments. US Citizens Only Former US Defense Contractor / US Gov / US Military Experience Only   This is a Hybrid Position - Remote mainly - but as well on call to come into a MAG office when requested. We are seeking candidates who live in proximity to our corporate HQ in Fairfax, VA primarily but will entertain persons living near our satellite offices in: Aberdeen, MD - Titusville, FL - Newport News, VA - Carthage NC Essential Duties and Responsibilities ----------------------------------------- #### **Duties include, but not limited to:** #### **Primary Responsibilities** * Design and implement CI/CD pipelines for multi-architecture deployments * Develop Infrastructure as Code (IaC) for hybrid cloud/edge environments * Implement container orchestration for resource-constrained platforms * Create automated testing frameworks (unit, integration, security, performance) * Build observability solutions (metrics, logging, tracing, profiling) * Develop GitOps workflows for configuration management * Optimize build processes for embedded and edge platforms #### **Secondary Responsibilities** * Implement security scanning in CI/CD pipelines (SAST, DAST, dependency scanning) * Automate compliance validation (STIG, RMF controls) * Design and implement secrets management solutions * Create security monitoring and incident response automation * Support security documentation and authorization packages Requirements ---------------- **Minimum Requirements:** **Primary Experience / Qualifications:** * 5+ years DevOps/DevSecOps experience * Expert-level knowledge of CI/CD platforms (Azure DevOps, GitLab CI, Jenkins) * Experience with artifact repositories (e.g., JFrog Artifactory, Sonatype Nexus, Azure Artifacts, to include Azure Container Registry) for managing diverse package types * Strong scripting skills (Python, Bash, PowerShell) * Extensive experience with containerization (Docker, Podman) and orchestration (Kubernetes) * Proficiency with IaC tools (Terraform, Ansible, Pulumi) * Experience with cloud platforms (Azure required, AWS/GCP beneficial) * Understanding of security scanning tools and practices * Experience with monitoring stacks (Prometheus, Grafana, ELK) * Knowledge of Git workflows and version control best practices #### **Preferred Qualifications** * Experience with embedded system CI/CD and cross-compilation * Knowledge of military software development processes * Familiarity with RMF and security authorization processes * Experience with air-gapped and classified environments * Understanding of supply chain security and SBOM * Kubernetes certifications (CKA, CKS) * Experience with chaos engineering and resilience testingFamiliarity with Policy-as-Code (PaC) tools like Open Policy Agent (OPA) for automating governance and security checks **Education & Experience:** * Bachelor's degree in CS, EE, or related field; * Master's preferred **Clearance:** * Must be eligible for Secret security clearance * Must be a US citizen Special Note ---------------- **What Makes You Successful Here** * You automate everything that can be automated * You treat infrastructure as code, not clickops * You build security into pipelines, not bolt it on after * You can work across cloud, on-prem, and edge environments * You measure success by how little manual work the team does **Why Join MAG:** * Work on meaningful problems that directly impact national security * Small, elite team where your contributions matter immediately * Access to cutting-edge hardware and technologies * Rapid prototyping environment - see your ideas deployed in weeks * Direct interaction with end users and field deployments * Professional development and conference attendance support * Flexible work arrangements with occasional field exercises * Opportunity to shape the future of tactical edge computing