DevSecOps Engineer
Nakupuna Companies2 years ago
Arlington, VA, USASenior
Base Salary
$13k - $160k/yr
Responsibilities
- Design, implement, and administer CI/CD pipelines across development, test, and production environments.
- Integrate and maintain automated security controls including application security testing, software composition analysis, secrets scanning, container scanning, infrastructure-as-code scanning, and policy-based quality gates.
- Administer source-code and artifact repositories, pipeline runners, deployment credentials, certificates, secrets, and role-based access.
- Automate infrastructure provisioning and configuration for repeatable, hardened, STIG-aligned environments.
- Manage containerized application builds and deployments, orchestration platforms, registries, software bills of materials, and signed artifacts where applicable.
- Monitor pipeline and platform availability, performance, and security events; troubleshoot failures; and coordinate patching, incident response, and vulnerability remediation.
- Maintain release records, system diagrams, operating procedures, security evidence, and RMF authorization artifacts.
- Collaborate with technical teams and customer stakeholders to translate delivery and security requirements into automated controls.
Requirements
- Bachelor’s degree in computer science, information technology, cybersecurity, engineering, or a related field.
- At least 5 years of relevant professional experience.
- Hands-on experience designing and administering production CI/CD pipelines using GitLab CI/CD, GitHub Actions, Azure DevOps, or Jenkins.
- Experience with Git workflows, release management, and artifact repositories.
- Experience with Docker, Kubernetes, infrastructure-as-code or configuration-management tools such as Terraform, Bicep, CloudFormation, or Ansible.
- Experience administering Azure, AWS, or on-premises environments, including Linux or Windows systems, networking, identity and access management, certificates, and secrets.
- Ability to automate operational tasks using PowerShell, Bash, Python, or a comparable scripting language.
- Working knowledge of secure software delivery, vulnerability management, STIGs, DoD RMF, NIST SP 800-53 controls, security evidence collection, and authorization support.
- Strong troubleshooting, documentation, communication, and collaboration skills.
- One or more relevant certifications such as Security+ CE, CySA+, CISSP, CSSLP, GSEC, or a cloud, DevOps, or Kubernetes security credential.
- Active Secret security clearance and U.S. citizenship are required.
Benefits
- Projected annualized compensation range is $130,00 to $160,000 USD.
- Employment includes work supporting a Department of the Navy organization and an in-house innovation team.
- The role requires an active Secret security clearance and U.S. citizenship.
- The position requires prolonged desk and computer work and repetitive hand, wrist, and finger motions, with reasonable accommodation available.
Tech Stack
About Nakupuna Companies
Nakupuna Companies is a Native Hawaiian Organization–owned family of companies that provides management consulting, IT, logistics, environmental, and facilities and infrastructure services to U.S. defense and federal agencies. Its portfolio includes SBA 8(a) small businesses supporting mission and business operations, systems modernization, and compliance for Department of Defense programs. Headquartered in Honolulu, it also has offices in Arlington, Denver, Mechanicsburg, Charleston, and Patuxent River.