> Markdown version of [/jobs/ext/629973-application-devsecops-engineer-1016](https://www.wearedevelopers.com/jobs/ext/629973-application-devsecops-engineer-1016). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Application DevSecOps Engineer (1016)

- **Company:** Herdt Consulting Inc
- **Location:** Radford, VA, United States (Remote available)
- **Salary:** $96,000.0 - $137,000.0
- **Contract:** Permanent contract
- **Skills:** JIRA, Microsoft Azure, Burp Suite, Cloud Engineering, Cyber Security, Continuous Integration, Key Management, OpenShift, Ansible, SonarQube, Tripwire, Gitlab, Containerization, Kubernetes, Deployment Automation, Atlassian Tools, Hashicorp, Terraform, Devsecops, Docker, Static Application Security Testing, Dynamic Application Security Testing
- **Published:** June 24, 2026
- **Apply:** https://www.clearancejobs.com/jobs/8992013/application-devsecops-engineer-1016

## About the Role

* Education: Bachelor's degree or higher in an IT-related field
 * Experience: Proven experience in CI/CD automation and DevSecOps frameworks
 * Work Schedule: Full-time

Mandatory Certifications

 * Baseline: Security+ CE or equivalent DoD IAT Level II
 * Computing Environment: Must obtain a certification (GitLab, Azure DevOps, or Jira) within 6 months of hire, * CI/CD Orchestration: Expertise in GitLab, Azure DevOps, or Atlassian for automated workflows.
 * Infrastructure as Code: Proficiency in Terraform and Ansible for environment provisioning.
 * Containerization: Experience with Docker, Kubernetes, and Red Hat OpenShift.

Preferred Skills & Experience

 * Security Testing: Knowledge of SonarQube, OWASP ZAP, and container scanners like Trivy or Clair.
 * Secrets Management: Experience with HashiCorp Vault or Sealed Secrets.

## Description

This role focuses on modernizing Army applications into a DevSecOps framework supporting the AECC project. The engineer will design and implement CI/CD pipelines using GitLab, Terraform, and Ansible to automate deployment and integrate security tools, ensuring the rapid and secure release of software-defined infrastructure., * Pipeline Design: Implement and maintain a DevSecOps framework for modernizing applications in the AECC environment.

 * Tool Integration: Integrate GitLab Ultimate, Terraform, and Ansible into pipelines to automate development and security processes.
 * Security Enforcement: Develop and enforce security gates within CI/CD pipelines, including SAST, DAST, and container scanning.
 * Modernization: Assist in transitioning legacy applications to a cloud-native, Kubernetes-based orchestration platform.


## Related Videos

- [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security)
- [Collaboration Quantified: Lessons from Open Source Developer Networks](https://www.wearedevelopers.com/videos/1422-collaboration-quantified-lessons-from-open-source-developer-networks)
- [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered)
- [WeAreDevelopers LIVE - Modern DevOps for IoT Devices and More](https://www.wearedevelopers.com/videos/1805-wearedevelopers-live-modern-devops-for-iot-devices-and-more)
- [Are Code Reviews Worth It? Insights from 16 Years of Review Data](https://www.wearedevelopers.com/videos/1135-are-code-reviews-worth-it-insights-from-16-years-of-review-data)
- [GitOps for the people](https://www.wearedevelopers.com/videos/815-gitops-for-the-people)

## Related Articles

- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)