> Markdown version of [/jobs/ext/3409188-senior-devsecops-software-engineer](https://www.wearedevelopers.com/jobs/ext/3409188-senior-devsecops-software-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior DevSecOps & Software Engineer - **Company:** ACT1 Federal, LLC - **Location:** Arlington, VA, United States - **Experience:** Expert - **Salary:** $170,000.0 - $200,000.0 - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Business Analytics Applications, Applications Architecture, Software Applications, User Authentication, Automation of Tests, Cloud Computing Security, Cloud Engineering, Configuration Management, Code Review, Cyber Security, Continuous Delivery, Continuous Integration, Data as a Services, Data Integration, Python (Programming Language), Machine Learning, Package Development Process, Cloud Services, Software Deployment, Software Engineering, Software Factory, Systems Integration, Software Vulnerability Management, Data Logging, Enterprise Software Applications, Containerization, Kubernetes, Infrastructure Automation Frameworks, Information Technology, Deployment Automation, Data Management, Devsecops, Programming Languages - **Published:** September 27, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=574f8f51704094af ## About the Role This position requires a senior technical subject matter expert with demonstrated experience delivering secure software applications and DevSecOps capabilities in Department of War, Federal, regulated, or other enterprise-scale environments. The engineer shall be capable of designing, developing, testing, containerizing, securing, and supporting deployment of applications through Government-approved pipelines and authorized environments., * Bachelor's degree from an accredited institution in data science, statistics, mathematics, economics, operations research, engineering, computer science, business analytics, or a related quantitative discipline. * 10+ years' experience in software engineering, DevSecOps, platform engineering, cloud-native application development, cybersecurity engineering, or related technical fields. * Demonstrated experience designing, developing, testing, containerizing, securing, and deploying production software applications. * Demonstrated experience developing or maintaining continuous integration and continuous delivery pipelines, source-code-management processes, artifact-management workflows, automated testing, deployment automation, and release-management practices. * Demonstrated experience with Python or a comparable modern programming language. * Demonstrated experience with container technologies, container orchestration, infrastructure as code, configuration management, cloud-native or enterprise application deployment, and automation. * Demonstrated experience developing, integrating, securing, or sustaining application programming interfaces, data integrations, and enterprise application services. * Demonstrated experience supporting Risk Management Framework technical implementation, security-control implementation, security documentation, vulnerability management, Security Technical Implementation Guide assessment and remediation, or authorization-package development. * Demonstrated ability to communicate technical risks, implementation status, security findings, architecture decisions, and delivery tradeoffs to senior technical and nontechnical stakeholders. * At least one relevant cybersecurity, cloud-security, DevSecOps, container-security, software-engineering, or Department of War workforce-qualification certification. * The position may require support outside normal business hours to meet time-sensitive transaction, interagency, executive, or industrial-base requirements. * Current Top Secret. Sensitive Compartmented Information (SCI) eligibility required ## Description * Provide software-engineering, DevSecOps, cybersecurity-engineering, platform-engineering, and implementation-support services for DASN (DIB) data-management and performance-assessment initiatives. * Design, develop, test, document, maintain, and support deployment of software applications, analytic tools, data services, application programming interfaces, and related components. * Develop applications using Python or comparable modern programming languages, frameworks, libraries, and development practices appropriate to Government-approved technical environments. * Design and implement secure application architectures, application programming interfaces, data integrations, authentication and authorization mechanisms, error handling, logging, monitoring, and performance-management capabilities. * Containerize applications and services; develop container-orchestration configurations; and support deployment through Government-approved development, testing, staging, and production environments. * Develop, configure, maintain, document, and improve continuous integration and continuous delivery pipelines, source-code-management practices, artifact-management processes, automated testing, release-management workflows, and deployment automation, as authorized by the Government. * Develop infrastructure-as-code artifacts, configuration-management approaches, automation scripts, deployment manifests, and repeatable environment-configuration practices supporting authorized application delivery and sustainment. * Support integration with Department of War software factories, enterprise pipelines, cloud services, data platforms, source systems, and other Government-approved technical environments. * Support deployment and sustainment of approved analytics, data-engineering, artificial-intelligence, machine-learning, reporting, and business-intelligence applications developed within or provided to DASN (DIB). * Provide technical implementation, documentation, remediation, and coordination support for Government-led Risk Management Framework activities. * Support implementation and documentation of security controls; secure configuration practices; vulnerability identification and remediation; Security Technical Implementation Guide assessment and remediation; continuous-monitoring activities; and authorization-package development. * Prepare technical artifacts supporting Government security-review, assessment, authorization-package, and continuous-monitoring activities, including system descriptions, architecture diagrams, control-implementation narratives, configuration documentation, test evidence, remediation plans, and related work products. * Conduct code reviews, automated testing, static and dynamic application-security testing, dependency analysis, container scanning, configuration reviews, and other Government-approved secure-software-development activities. * Prepare executive briefings, technical memoranda, implementation plans, architecture diagrams, decision packages, status reports, and risk summaries for senior technical and nontechnical stakeholders. * Coordinate technical products and supporting information with DASN (DIB) directorates, ASN (RD&A) offices, DON acquisition organizations, DON enterprise service providers, Department of War stakeholders, cybersecurity organizations, and other Government-approved points of contact, as directed by the Government. * Support time-sensitive taskers, technical reviews, executive engagements, and approved working groups associated with software development, DevSecOps, cybersecurity, data, analytics, and industrial-base performance-assessment initiatives.