DevSecOps Engineer (TS/SCI)
Maxar Technologies20 hours ago
Herndon, VA, USAMid Level
Base Salary
$116k - $169k/yr
Responsibilities
- Build and maintain command-line tools, APIs, dashboards, and production-quality software to automate cybersecurity and developer workflows.
- Convert cybersecurity, compliance, infrastructure, and developer processes into repeatable software automation.
- Develop security analysis, vulnerability correlation, compliance tracking, remediation, exception-processing, reporting, and dashboard applications.
- Deploy and manage highly available applications and maintain HashiCorp Nomad and Kubernetes clusters.
- Develop Infrastructure-as-Code solutions with Terraform, Ansible, or comparable tools.
- Build and manage CI/CD pipelines with GitLab or equivalent tools.
- Perform DNS configuration, monitoring, logging, troubleshooting, and system reliability work.
- Integrate security testing and static analysis tools, analyze scan findings, and support false-positive and enterprise software approval documentation.
- Perform cybersecurity remediation on managed virtual machines, including OS patching, STIG implementation, and software updates.
- Maintain configuration management for release products and troubleshoot networks, automation pipelines, applications, and infrastructure.
Requirements
- Active TS/SCI clearance, U.S. citizenship, and willingness and ability to pass a CI polygraph are required.
- Must be willing and able to work 40 hours per week onsite in a SCIF in Herndon, Virginia.
- At least 3 years of industry software development or software engineering experience is required.
- At least 5 years of DevSecOps experience with a bachelor's degree in Computer Science, Information Systems, or a related field, or a master's degree with at least 3 years of relevant experience is required.
- Demonstrated ability to design, write, test, debug, and maintain software using Python, Go, Java, C#, or a similar language is required.
- Experience building automation tools, APIs, or applications and strong Python, Bash, or comparable automation skills are required.
- Experience with cloud environments, Kubernetes, Docker, Infrastructure-as-Code, CI/CD pipelines, automated deployment, monitoring, networking, load balancing, source control, and open-source or custom application deployment is required.
- Experience applying DevSecOps security practices with tools such as Trivy, Grype, GitLab SAST, or SonarQube is required.
- Familiarity with Prometheus, Grafana, or ELK Stack and moderate Linux system administration experience are required.
- Working knowledge of Linux and Windows operating systems, web services, SQL databases, and Agile environments is required.
- Desired qualifications include Security+ or comparable certification, REST APIs, microservices, IaaS/PaaS, web services, Docker STIGs, CONMON remediation, RHCSA/LPIC 1/2, CKA, or Docker Certified Associate certification.
Benefits
- Competitive total rewards package with a 401(k) and company match, mental health resources, student loan repayment assistance, adoption reimbursement, and pet insurance.
- This is a full-time onsite role requiring work in a SCIF in Herndon, Virginia.
- The application window is three days from posting and remains open until a qualified candidate is identified.
Tech Stack
About Maxar Technologies
Maxar Technologies builds and operates commercial Earth‑observation satellites and sells high‑resolution imagery, 3D products, and geospatial analytics to government, defense, and enterprise customers. Headquartered in Westminster, Colorado, the company was formed in 2017 from the merger of DigitalGlobe and MDA and was acquired by Advent International in 2023; it supplies data for national security, mapping, and disaster response, and licenses imagery through subscription and platform APIs.