DevSecOps Engineer - Government
Applied Intuition9 hours ago
Base Salary
$160k - $225k/yr
Responsibilities
- Own secure code integration across source, build, test, release, and deployment workflows.
- Build and maintain secure CI/CD pipelines, reusable templates, and hardened build environments.
- Integrate and consolidate SAST, DAST, SCA, secrets, container, and infrastructure-as-code scanning tools.
- Define security promotion gates, severity thresholds, exception workflows, and actionable remediation processes.
- Automate system hardening, security validation, policy enforcement, and machine-readable compliance evidence.
- Build preventive and detective controls across AWS GovCloud multi-account environments, including automated remediation.
- Implement software supply-chain protections such as SBOM generation, artifact signing, dependency management, and image admission control.
- Support software promotion into classified and air-gapped environments with offline dependencies, package mirrors, and controlled transfer workflows.
- Lead threat modeling and security design reviews and propose compensating controls.
- Map technical controls to NIST, DISA STIG, DoD, and CMMC requirements and support assessments and ATO activities.
- Provide secure development guidance, technical documentation, developer troubleshooting, and secure-practice coaching.
- Participate as a backup for build, artifact, and pipeline systems and join the security on-call rotation.
Requirements
- Bachelor’s degree in Computer Science, Software Engineering, Cyber Security, or a related field, or equivalent hands-on experience.
- At least 5 years of experience across software engineering, DevOps, platform engineering, or security engineering.
- DoD 8140/8570 IAT Level II qualification, including Security+ certification as a condition of employment.
- Hands-on scripting or software development experience with Python, Bash, Go, or similar languages.
- Experience with CI/CD platforms such as GitLab CI, GitHub Actions, or Jenkins.
- Production experience with Docker, Kubernetes, and infrastructure-as-code or configuration management tools such as Terraform, Ansible, AWS CDK, or CloudFormation.
- Hands-on AWS experience with Config, Security Hub, IAM, KMS, CloudTrail, and CloudWatch/EventBridge.
- Experience writing and deploying policy-as-code using OPA/Rego, cfn-guard, Cedar, or equivalent.
- Working knowledge of NIST 800-53, NIST 800-171, DISA STIGs, RMF, DFARS 252.204-7012, and CMMC Level 2.
- Experience producing audit-ready evidence, working with third-party assessors, and introducing blocking security gates into delivery pipelines.
- Ability to integrate security tooling into developer workflows, troubleshoot findings, teach secure practices, and unblock delivery.
- Must be a U.S. citizen and have or be able to obtain an active DoD security clearance, with a minimum of Secret and Top Secret preferred.
- Willingness to travel for company business as required, approximately 10%.
- Preferred qualifications include CISSP, CSSLP, CKS, or AWS Security Specialty certification; experience with Platform One, Iron Bank, Big Bang, Kata Containers, gVisor, classified or air-gapped environments, SLSA, SSDF, CycloneDX, SPDX, OSCAL, FedRAMP, DoD Impact Level 4/5 authorization, or securing AI/ML workloads.
Benefits
- Full-time employees primarily work from an Applied Intuition office five days per week, with occasional remote-work flexibility; this expectation does not apply to contractors.
- Benefits may include health, dental, vision, life and disability insurance, a 401(k) with employer match, learning and wellness stipends, and paid time off.
- The role includes approximately 10% business travel as required by the company or customer.
About Applied Intuition
Applied Intuition builds software tools, infrastructure, and operating systems for developing, testing, and deploying autonomous and driver-assistance systems across automotive, trucking, defense, construction, mining, and agriculture. It sells enterprise software and services including simulation, sensor data management, HD mapping, and a vehicle OS to OEMs and government customers. Founded in 2017 and headquartered in Sunnyvale, California, it counts 18 of the top 20 global automakers and the U.S. military among its users.