Security DevSecOps Capability Lead

Amentum is a global leader in advanced engineering and innovative technology solutions, trusted by the United States and its allies to address their most significant and complex challenges in science, security and sustainability. Our people apply undaunted curiosity, relentless ambition and boundless imagination to challenge convention and drive progress. Our commitments are underpinned by the belief that safety, collaboration and well-being are integral to success. Headquartered in Chantilly, Virginia, we have approximately 50,000 employees in more than 70 countries across all 7 continents.

Are you seeking a career that offers a healthy work-life balance, a friendly company culture, and engagement with a supportive community?

We’ll inspire and empower you to deliver your best work so you can evolve, grow and succeed – today and into tomorrow.  We offer an exciting range of opportunities to develop your career within a supportive and diverse team who always strive to do the right thing for our people, clients and communities.

People are our greatest asset, and we offer a competitive package to retain and attract the best talent. 

Our values stand on a foundation of safety, integrity, inclusion and diversity. We put people at the heart of our business, and we genuinely believe that we all succeed by supporting one another through our culture of caring. We value positive mental health and a sense of belonging for all employees. 

Amentum is proud to be an Equal Opportunity Employer, please refer to our Enterprise Agreement and www.fairwork.gov.au for more information.

Role Title: DevSecOps Capability Lead

Position Scope: 

This role supports the delivery and ongoing operation of trusted digital systems that are critical to the safe and effective management of a nationally significant submarine capability. These systems include complex software and data platforms that must be secure, reliable and able to evolve over time.
An experienced DevSecOps Engineer is sought to help design, implement and sustain modern, high‑assurance software delivery practices. The role focuses on building secure, repeatable approaches to software development, testing and deployment, ensuring that new capabilities and updates can be introduced smoothly and safely across technical environments.

Working closely with digital engineering, information security and operational stakeholders, the role will help establish the tools, processes and environments that support continuous integration, robust testing and confident software deployment across the full software lifecycle.

The key responsibilities of the role include, but not limited to: 

- Provide specialist DevSecOps expertise to help design, establish and mature secure, reliable software delivery practices.
- Develop clear, practical policies, processes and standard operating procedures.
- Advise on and support the selection, deployment and ongoing configuration of DevSecOps toolchains and technology stacks.
- Work collaboratively with engineering, security and operational stakeholders to translate technical and assurance requirements into effective, workable solutions.
- Design, build and maintain high‑assurance CI/CD environments that support secure software development, testing and deployment.
- Contribute hands‑on capability to the setup and evolution of cloud and on‑premises development and sandbox environments, supporting experimentation and use‑case validation.
- Establish and document processes to support the ongoing operation, maintenance and uplift of CI/CD environments throughout their lifecycle.
- Support the delivery and operation of pre‑release testing environments, including implementing automated regression testing wherever practical.
- Assist with the assessment, testing and validation of vendor‑supplied software updates as well as internally developed or enhanced capabilities.
- Provide practical support to software procurement, development, configuration and integration activities
- Implement secure development approaches using containerisation and orchestration technologies (such as Kubernetes).
- Design solutions aligned to relevant security controls and accreditation requirements, supporting platforms through formal assurance processes.

Essential Requirements:

- Tertiary qualification in Software Engineering, Computer Science, Information Technology, Systems Engineering, or a related discipline
- Significant experience working as a Software Engineer, DevOps or DevSecOps specialist in complex technical environments
- Proven capability developing and documenting DevSecOps frameworks, including policies, processes and standard operating procedures
- Demonstrated experience operating development and testing environments aligned with DevSecOps and CI/CD principles
- Strong working knowledge of cloud platforms and on‑premises environments, and how to integrate them securely
- Experience supporting or integrating vendor‑supplied enterprise software (e.g. PLM, CAD or similar complex platforms)
- Practical experience using containerisation and orchestration technologies (e.g. Docker, Kubernetes)
- Ability to interpret and apply information security controls (including ISM-aligned requirements) and support systems through security accreditation processes.
- Strong stakeholder engagement skills, with the ability to translate technical and assurance requirements between engineering, security and operational teams
- Excellent written and verbal communication skills, particularly for producing clear technical documentation and guidance.
- Proven ability to work independently as a senior specialist contractor, delivering outcomes with minimal supervision
- Experience working in government, defence, critical infrastructure or other high‑assurance environments

Desirable Requirements:

- Professional certification in DevSecOps or DevOps
- Cloud platform certifications
- Cyber security or secure software development certifications

Required Security Clearance Level: NV1

Location: Port Adelaide SA or Fishermans Bend, Melbourne, VIC

Weekly Hours: 40