DevSecOps Engineer (DoD)
RapidFort, Inc.5 months ago
Remote, United StatesMid Level
Base Salary
$140k - $175k/yr
Responsibilities
- Design and maintain Kubernetes infrastructure, including cluster provisioning, RBAC, network policies, and workload management.
- Package and deploy applications with Helm and manage chart repositories and release lifecycles.
- Implement policy controls with Istio, OPA Gatekeeper, Kyverno, and Kubernetes admission controllers.
- Build and maintain CI/CD pipelines with automated security scanning and compliance gates.
- Deploy and operate workloads on AWS GovCloud and Azure Government with high availability, disaster recovery, and cross-region compliance.
- Manage and harden container images and integrate approved registries such as Iron Bank and Platform One.
- Configure observability platforms including Prometheus, Grafana, and Datadog, with alerting, dashboards, and SLO frameworks.
- Support ATO processes, STIG/CIS scanning, System Security Plans, and related compliance documentation.
- Design offline image transfer, registry mirroring, and artifact management solutions for air-gapped and classified environments.
- Collaborate with development, security, program, government platform, and managed service provider teams to sustain approved DoD software factories.
Requirements
- At least four years of hands-on Kubernetes experience in production environments.
- Experience deploying and managing applications with Helm across multiple environments.
- Working knowledge of Istio, OPA Gatekeeper, Kyverno, or equivalent Kubernetes policy and service mesh tooling.
- Experience with GitLab CI, GitHub Actions, Jenkins, or an equivalent CI/CD platform.
- Hands-on experience with AWS and/or Azure, including IAM, networking, storage, and managed Kubernetes services such as EKS or AKS.
- Experience building, scanning, hardening, and distributing container images through OCI registries.
- Familiarity with Prometheus, Grafana, and/or Datadog for monitoring and observability.
- Experience with SSO and identity federation, with familiarity with Keycloak or equivalent OIDC/SAML providers.
- Active Department of War security clearance at the Secret level or higher is required.
- U.S. citizenship and eligibility for a federal background investigation are required.
- Preferred experience includes Iron Bank, Registry1, Platform One, Big Bang, GitLab Ultimate security features, military branch programs, software supply chain security, cATO or continuous authorization, and DoD compliance frameworks such as NIST 800-53, STIGs, RMF, and FedRAMP.
- CKA, CKS, AWS GovCloud, or equivalent certifications are preferred.
Benefits
- Full-time remote position
- Benefits and equity are offered where applicable
- Opportunity to support Department of War programs, classified systems, and air-gapped environments
Tech Stack
AnsibleAWSAzureDatadogGitHub ActionsGitLab CI/CDGrafanaHelmIstioJenkinsKubernetesOpenShiftPrometheusTerraform
Categories
About RapidFort, Inc.
RapidFort builds a SaaS platform for securing containerized applications and the software supply chain, offering curated near‑zero CVE images, SBOM/RBOM generation, and runtime hardening to reduce attack surface. It serves enterprises and U.S. public‑sector customers, including defense work that requires U.S. citizenship for some roles. Founded in 2020 and headquartered in Sunnyvale, California, the company is privately held.