> Markdown version of [/jobs/ext/2874426-devsecops-developer](https://www.wearedevelopers.com/jobs/ext/2874426-devsecops-developer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # DevSecOps Developer - **Company:** Virtual, Inc. - **Location:** Fort Meade, MD, United States - **Experience:** Expert - **Salary:** $120,000.0 - $130,000.0 - **Contract:** Permanent contract - **Skills:** Java (Programming Language), Application Programming Interfaces (APIs), Systems Engineering, Automation of Tests, Bash Shell, Configuration Management, System Configuration, Continuous Delivery, Continuous Integration, DevOps, Github, Python (Programming Language), Red Hat Enterprise Linux, Ansible, Security Software, Software Engineering, Software Factory, Delivery Pipeline, SC Clearance, Gitlab-ci, Cyber Warfare, Code Restructuring, Devsecops, Jenkins, Static Application Security Testing, Vulnerability Analysis, Golang, Programming Languages, Microservices, Dynamic Application Security Testing - **Published:** September 13, 2026 - **Apply:** https://www.careerjet.com/jobad/use63970ecab2094536343fd2644f097da ## About the Role * Clearance: Active DoD Secret clearance (or higher). * Location: Must be local to Maryland with the ability to commute to and work on-site at Ft. Meade as required. * Experience: 5+ years of professional experience in DevSecOps, DevOps, Systems Engineering, or a related industry role. * Hands-on experience administering and configuring Red Hat Enterprise Linux (RHEL). * Proven experience with configuration management and automation using Ansible. * Strong proficiency in writing automation scripts using Bash and Python. * Demonstrated experience designing and maintaining CI/CD processes and pipelines (e.g., GitLab CI, Jenkins, GitHub Actions). * Hands-on experience integrating security testing (SAST, DAST, or container scanning) into automated pipelines. Preferred Qualifications * Prior direct experience working within or interfacing with DoW Software Factories (e.g., Platform One, Kessel Run, Army Software Factory). * Hands-on experience with Iron Bank onboarding, Repo One merge requests, VAT (Vulnerability Assessment Tracker) justified findings, and automated container hardening. * Practical knowledge of the DoD Enterprise DevSecOps Reference Design and CNSSI requirements. ## Description We are seeking a cleared DevSecOps Developer to design, automate, and secure our infrastructure and deployment pipelines. In this role, you will bridge the gap between development, security, and operations by leveraging Red Hat, Ansible, and custom scripting to maintain secure CI/CD processes. This position requires an active Secret clearance (or higher) and is located in Maryland, requiring the ability to work on-site at Ft. Meade as needed. The Senior DevSecOps Engineer will lead the automated build, secure supply chain certification, container hardening, and continuous delivery of mission-critical software across defense cloud environments. This role bridges full-stack software development with automated security gates, enforcing compliance with DoDI 8430 (Accelerated Mission Software Development), the DoD Software Modernization Strategy, and Continuous Authorization to Operate (cATO) criteria Day-To-Day Duties and Responsibilities CI/CD Pipeline Architecture Design - declarative GitOps pipelines (GitLab CI, GitHub Actions) integrating SAST, DAST, Container Scanning, Dependency Scanning, and Software Bill of Materials (SBOM) generation. cATO & Governance Automation - Implement automated policy-as-code to satisfy continuous compliance gates under DoDI 8430 and OSD CIO cATO requirements (Real-time Visibility, Active Cyber Defense, Pipeline Attestation) Iron Bank Container Hardening - Author hardened container definitions (Dockerfiles) adhering to DoD Container Hardening Standards. Remediate CVEs, automate OpenSCAP/STIG validation, and shepherd containers through the Iron Bank / Repo One pipeline to achieve DCCS certification. Software Development & API Engineering - Architect and refactor microservices using modern programming languages (Go, Python, Java, or Rust). Build automated unit, integration, and contract tests following 12-factor application design principles. ## Related Videos - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [Go with the Flow: Stop the Leaks Before Your Memory's a Waterfall!](https://www.wearedevelopers.com/videos/100073-go-with-the-flow-stop-the-leaks-before-your-memory-s-a-waterfall) - [#90DaysOfDevOps - The DevOps Learning Journey](https://www.wearedevelopers.com/videos/548-90daysofdevops-the-devops-learning-journey) - [Demystifying DevOps—Pros, cons, dos & don'ts](https://www.wearedevelopers.com/videos/338-demystifying-devops-pros-cons-dos-don-ts) ## Related Articles - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [DevOps Engineer Salary [2023]](https://www.wearedevelopers.com/magazine/203-devops-engineer-salary-2023) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)