DevSecOps Engineer
ISYS Technologies, Inc.1 day ago
Boulder, CO, USASenior
Responsibilities
- Lead DevSecOps initiatives across multiple enclaves and projects as the primary technical point of contact for secure software and infrastructure delivery.
- Architect, implement, and maintain secure cloud and on-premises environments using Infrastructure as Code.
- Design, build, and operate automated CI/CD pipelines with integrated security controls.
- Implement, harden, and manage containerized workloads using Docker, Kubernetes, and related platforms and deployment tools.
- Administer and troubleshoot Red Hat Enterprise Linux systems across storage, operating system, application, and network layers.
- Integrate security into the SDLC through secure coding practices, code and pipeline reviews, and developer mentoring.
- Establish observability for logging, metrics, tracing, alerting, reliability, incident response, and performance monitoring.
- Identify and remediate vulnerabilities across applications, containers, hosts, and infrastructure in accordance with security controls and DevSecOps guidance.
- Implement and maintain DAST and SAST tooling to support RMF Assessment and Authorization and continuous monitoring.
- Manage binary registries and package repositories in secure environments.
- Maintain policy-as-code and compliance-as-code solutions enforcing security and deployment baselines.
- Collaborate with systems engineering, cybersecurity, operations, vendors, Product Owners, and Scrum Masters on secure capability delivery.
- Contribute to architecture, deployment, security, DevSecOps, and technical review documentation.
- Drive automation and process improvements that increase deployment frequency, reduce change failure rates, and strengthen security posture.
Requirements
- Active DoD Secret clearance and eligibility and willingness to obtain TS/SCI clearance.
- 10+ years of professional experience, with potential additional flexibility subject to customer approval.
- Bachelor’s degree, or additional years of experience in lieu of a degree.
- Professional software or DevSecOps experience in mission-critical defense, space, or aerospace environments.
- Strong Red Hat Enterprise Linux administration and Bash or Python scripting skills.
- Proficiency in at least one major programming language such as Java, C#, Python, Go, or JavaScript/TypeScript and associated frameworks.
- Experience with Git-based workflows, containers, Kubernetes, RKE2, OpenShift, Rancher, and binary or container registries.
- Expertise in CI/CD pipeline design, security controls including SAST, DAST, SCA, container scanning and secret management, and secure SDLC practices.
- Advanced Infrastructure as Code and cloud experience with Terraform, Ansible, CloudFormation, Pulumi, AWS, Azure, or GCP.
- Experience with policy-as-code and compliance-as-code tools such as OPA, Conftest, or Checkov.
- Familiarity with DoD DevSecOps, Agile delivery, NIST controls, and OWASP Top 10.
- Preferred qualifications include classified space or defense experience, a STEM bachelor’s degree, MBSE experience, systems engineering processes, configuration management, test automation, AI/ML infrastructure, virtualized platforms, networking, acquisition documentation, and relevant cloud, Kubernetes, DevSecOps, or security certifications.
- US citizenship is required.
Benefits
- Fully onsite position in Boulder, Colorado.
- Long-term growth and development opportunities.
- Competitive compensation program and comprehensive benefits package.
- Annual base salary information is referenced but no amount is provided.
Tech Stack
AnsibleAWSAzureBashC#DockerGitGitHub ActionsGitLab CI/CDGoGoogle Cloud PlatformHelmJavaJavaScriptJenkinsKubernetesOpenShiftPythonRancherTerraformTypeScript
About ISYS Technologies, Inc.
ISYS Technologies, Inc. (also operating as I2X Technologies) provides engineering, IT, and cybersecurity services to U.S. federal agencies, the Department of Defense, and government space programs. Founded in 1989 and headquartered in Littleton, Colorado, it delivers systems engineering, software, cloud, data, and network operations support across programs nationwide. The company is privately held and part of OSC Global, operating primarily through government contracts and long-term program support.