DevSecOps Engineer
$114k - $231k/yr
Senior
Bachelor's
Mt Laurel Township, NJ, USA+2 moreMore locations: Arlington County, Arlington, VA, USA | Fall River, MA, USA
HybridOn-site at least 3 days per week; based in one of the listed offices. Travel up to 10%.
DevOps & InfrastructureDevOps Engineering
No H1B Sponsorship
US Citizenship Required
About the job
Requirements
- Five to seven years of professional, post-graduation experience in DevSecOps, DevOps, Platform/Systems Engineering, or Software Engineering, emphasizing automation or platform administration.
- A bachelor's degree in Computer Science, Engineering, or a related technical field, or equivalent practical experience.
- U.S. citizenship.
- Ability to travel up to 10%.
- Strong working knowledge of secure Software Development Life Cycle methodologies, including Agile/Scrum, branching strategies, secure code reviews, automated linting, and release packaging.
- Practical experience building and scaling CI/CD pipelines with Jenkins or another CI/CD orchestrator, including custom shared libraries, declarative pipelines, or automated test hooks.
- Practical experience orchestrating containerized workloads with Podman, Docker, or Kubernetes, including network configuration, container storage, and local registry synchronization.
- Experience writing and modularizing Infrastructure as Code using Ansible, OpenTofu, or another automation technique to deploy robust, repeatable environments.
- Intermediate Python programming, such as writing API clients, custom scripts, or automation frameworks, and strong Linux/Unix systems-level Bash scripting.
- Strong proficiency with Git version control, including branch strategies, resolving merge conflicts, and Git Hooks or API-driven integrations.
- Systems-level troubleshooting skills to diagnose root causes of low-level operating system, container, or CI/CD pipeline issues.
- Collaborative, enablement-focused approach, strong communication skills, and willingness to mentor junior engineers and help software teams resolve platform issues.
Responsibilities
- Design, architect, and optimize CI/CD pipelines using Jenkins, including reusable pipeline templates and custom shared components for software teams.
- Automate security controls—including static application security testing, software composition analysis, container scanning, software bill of materials generation, and secrets detection—within pipelines and establish autonomous guardrails.
- Configure, scale, and secure the Software Factory platform using GitLab, JFrog Artifactory, and SonarQube; manage system setups, staging and testing clusters, and automated tool backups.
- Design, modularize, and maintain Infrastructure as Code blueprints using Ansible and OpenTofu for reusable environment provisioning and deployments.
- Orchestrate and optimize containerized clusters using Podman, secure cluster communications, and manage local registry synchronization.
- Own and harden DevSecOps platform deployments in secure, air-gapped environments by packaging and deploying dependencies, remediating environment-specific issues, supporting repeatable software delivery without external connectivity, and collaborating with security operations teams on platform compliance.
- Translate Defense Information Systems Agency Security Technical Implementation Guides, National Institute of Standards and Technology 800-171, and Risk Management Framework controls into automated pipeline validation scripts and policy-as-code configurations.
- Diagnose and remediate low-level system friction points, including SELinux policy denials, pipeline token validation issues, and local network or VPN bottlenecks, and define long-term fixes.
- Analyze developer telemetry, feedback, and build metrics to remove pipeline friction and improve the developer experience.
- Partner with software, security, and systems engineering teams to establish collaborative delivery patterns and guide developers on DevSecOps best practices.
Desired Qualifications
- Experience designing software bill of materials auditing workflows or navigating open-source license compliance, including GPL/LGPL risk management.
- Experience architecting or configuring high-performance local AI infrastructure, such as GPU clusters, vLLM orchestration, or vector databases such as Qdrant, behind a VPN or in air-gapped environments.
- Experience configuring custom pipeline diagnostics, usage telemetry, or observability stacks such as Prometheus, Grafana, or ELK to monitor platform health and usage.
- Active Secret or Top Secret security clearance, with practical experience applying Defense Information Systems Agency Security Technical Implementation Guides or preparing environments for Cybersecurity Maturity Model Certification audits.
About the company
IDT provides automated software testing, data analysis, and cybersecurity solutions for DoD mission-critical systems. Its ATRT technology automates the full testing lifecycle—from component tests to system integration and result analysis—allowing rapid updates of large, complex software. The offering emphasizes repeatable, statistically rigorous testing, rapid configuration validation, and on-demand regression tests in response to cyber threats, with solutions tailored to each customer’s system. The goal is to field new software capabilities faster and more affordably by reducing the time and cost spent on software testing.
Company Size
201-500
Company Stage
Grant
Total Funding
$1.6M
Headquarters
Arlington, Virginia
Founded
2006
Get referred to Innovative Defense Technologies
See people who can refer or advise you
Simplify's Take
What believers are saying
- June 2026 Navy IDIQ reached $748.6 million, extending through June 2031.
- May 2026 ONR Paladin contract added $96.3 million for AI testing modernization.
- Virginia approved a $19 million Arlington expansion creating 210 jobs in 2026.
What critics are saying
- Navy concentration is severe: Project Paladin and June 2026 IDIQ dominate revenue.
- Sole-source status creates procurement vulnerability if NAVSEA replaces IDT's toolchain.
- Defense hiring expansion to 210 jobs raises execution risk before 2027 deliverables.
What makes Innovative Defense Technologies unique
- IDT won Navy sole-source ATRT work in May 2026 and June 2026.
- IDT embeds automated test engineering into fleet software, not generic consulting.
- IDT spans simulation, virtualized tactical systems, and rugged edge compute for operators.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Hybrid Work Options