2 months ago
Arlington, VA, USASenior
Responsibilities
- Build and maintain secure CI/CD pipelines and zero-downtime deployment processes.
- Automate cloud infrastructure provisioning and configuration management using Infrastructure as Code.
- Support the DoD Risk Management Framework, including System Security Plans, Security Assessment Reports, POA&Ms, and continuous monitoring.
- Apply and automate DISA STIGs, perform vulnerability scanning, and manage remediation and patching.
- Integrate SAST/DAST testing into CI/CD pipelines and automate compliance-as-code artifacts for eMASS.
- Provide technical infrastructure, platform support, cybersecurity, and information assurance for the project.
Requirements
- At least 5 years of DevSecOps experience designing and maintaining CI/CD pipelines and automating software deployment, or equivalent experience with Jenkins, GitLab CI/CD, or Ansible.
- At least 5 years supporting the DoD or federal Risk Management Framework, including DISA STIGs, vulnerability assessments, and remediation.
- At least 5 years automating cloud infrastructure and platform provisioning in AWS or Azure using Terraform or CloudFormation.
- Experience with security scanning, monitoring and logging integration, containerization, orchestration, SAST/DAST, RMF, continuous ATO, and eMASS artifact automation.
- Bachelor's degree in computer science, engineering, or equivalent plus 5+ years of experience, or an associate degree plus 7+ years of experience.
- Current DoDM 8140.03-qualifying certification for the assigned cyberspace work role, such as Security+ or CySA+.
- Preferred qualifications include a bachelor's degree in computer science, cybersecurity, or a related field; CISSP; AWS or Azure security specialty certification; and Certified Kubernetes Security Specialist certification.
- Must be a U.S. citizen and able to obtain and maintain an active Secret or higher security clearance.
Benefits
- On-site work based in Arlington, Virginia.
- Competitive compensation, strong benefits, and a vacation package.
- Fast-paced work environment with opportunities to contribute to mission-focused solutions.
About Zantech
Zantech is a privately held IT services firm delivering digital modernization, application development, cybersecurity, and cloud services to U.S. federal agencies across defense, intelligence, and civilian sectors. The company also provides program management and systems engineering, often executing work via prime contracts and government contract vehicles. Founded in 2007 and headquartered in Reston, Virginia, it operates as a Women-Owned Small Business with CMMI- and ISO/ITIL-aligned practices.