> Markdown version of [/jobs/ext/3799305-devsecops-security-engineer](https://www.wearedevelopers.com/jobs/ext/3799305-devsecops-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# DevSecOps / Security Engineer

- **Company:** ZANTECH INC.
- **Location:** Arlington, VA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Adobe Analytics, Amazon Web Services, Microsoft Azure, Cloud Computing, Configuration Management, Cyber Security, Continuous Integration, Ansible, Software Deployment, Data Logging, Information Security Management System, Cloudformation, Containerization, Gitlab-ci, Kubernetes, Infrastructure Automation Frameworks, Information Technology, Deployment Automation, Nessus, Terraform, Splunk, Devsecops, Docker, Elk Stack, Jenkins, Plan of Action and Milestones, Static Application Security Testing, Vulnerability Analysis, Microservices, Dynamic Application Security Testing
- **Published:** October 17, 2026
- **Apply:** https://www.juju.com/job/1_BreezyHR49402-7fe849d8db28

## About the Role

Are you ready to work with a performance-based small company?, Responsibilities include, but will not be limited to: + Build and maintain secure, automated CI/CD pipelines and zero-downtime deployment processes + Automate infrastructure provisioning and configuration management via Infrastructure as Code + Support the RMF process: System Security Plan, Security Assessment Report, and POA&M development and continuous monitoring + Apply and automate DISA STIGs; run vulnerability scanning and manage remediation + Integrate SAST/DAST testing and auto-generate compliance-as-code artifacts (e.g., Ports/Protocols/Services, topology diagrams) for eMASS Required Experience or Knowledge of the following technologies/functions: + 5 years in DevSecOps, including designing, implementing, and maintaining CI/CD pipelines and automating software deployment (Jenkins, GitLab CI/CD, or Ansible) + 5 years supporting the Risk Management Framework (RMF) for DoD or federal systems, including DISA STIGs, vulnerability assessments, and patching/remediation + 5 years
automating cloud infrastructure and platform provisioning (AWS, Azure) using Infrastructure as Code (Terraform or CloudFormation). + Skills Required: + CI/CD pipeline design and secure software deployment automation + Infrastructure as Code (Terraform, Ansible, CloudFormation) + Security scanning and monitoring/logging integration (Nessus, OpenSCAP, Splunk, ELK Stack) + Containerization and orchestration in microservices architectures (Docker, Kubernetes) + SAST/DAST integration directly into the CI/CD pipeline + RMF process support, DISA STIG application, and continuous ATO / eMASS artifact automation Required Education/Certifications: + Education Required: + Bachelor's degree in computer science, engineering, or equivalent, and 5+ years of experience OR + AA with 7+ years of experience is an accepted substitute + Education Preferred: + Bachelor's degree in Computer Science, Cybersecurity, or a related field + Certifications Required: + Current DoDM

## Description

Zantech is looking for a talented DevSecOps / Security Engineer to contribute to the success of our upcoming Technical Infrastructure and Platform Support project for an On-Site role based out of Arlington, VA. The DevSecOps / Security Engineer will play a crucial role in providing: + Technical Infrastructure and Platform Support + Cybersecurity and Information Assurance (RMF, continuous ATO, Compliance-as-Code) The DevSecOps / Security Engineer serves as the lead technical engineer for automation, CI/CD, and security posture of the cloud infrastructure, directly executing Technical Infrastructure and Platform Support requirements and supporting continuous Authority to Operate (ATO) under the DoD Risk Management Framework.