Software Engineer - DevSecOps
No salary listed
Mid, Senior
Bachelor's
San Antonio, TX, USA
In PersonFull-time on-site in San Antonio, Texas.
DevOps & InfrastructureDevOps Engineering
No H1B Sponsorship
US Citizenship, US Top Secret Clearance Required
About the job
Requirements
- U.S. citizenship and a TS/SCI clearance are required.
- A bachelor's degree in Computer Science, Cybersecurity, Information Technology, Software Engineering, or a related field is required.
- DoD 8140/8570 IAT Level II certification, such as Security+ CE, or equivalent is required.
- At least 4 years of relevant experience is required.
- Senior-level comprehensive knowledge across key tasks and high-impact assignments is required, including planning and leading major technology assignments and functioning as a technical expert across the team.
- Deep understanding of Agile and DevSecOps methodologies, with experience implementing DevSecOps using Jenkins, GitLab, or similar tools, is required.
- Experience building and maintaining CI/CD pipelines for a large enterprise is required.
- Experience developing infrastructure as code and configuration as code with Packer, Terraform, and Ansible is required.
- Development experience with Kubernetes, Docker, and Helm is required.
- Experience with cloud systems and architectures such as AWS, Google Cloud, or Azure is required.
- Experience with Linux and scripting in Bash or Python is required.
- Working knowledge of source version control, build and release tools, and CI/CD is required.
- A strong security-first mindset is required.
Responsibilities
- Build and maintain CI/CD pipelines, such as GitLab CI and Jenkins, for an enterprise with many applications.
- Develop, test, and maintain containerized applications, and work with source version control and build and release tooling.
- Develop infrastructure as code and configuration as code using Packer, Terraform, and Ansible.
- Automate security control implementation, validation, and evidence collection in support of RMF, ATO, and cATO.
- Integrate and tune pipeline security tooling, including static application security testing, dynamic application security testing, software composition analysis, container scanning, secrets detection, and policy gates.
- Support security-relevant changes, Security Impact Assessments, and control validation for embedded value streams.
- Support application and container vulnerability management, whitelisting decisions, and CTF/pipeline compliance so changes do not invalidate the ATO.
- Collaborate with information system security engineers, software developers, Value Stream engineers, COT, CPT, and Government stakeholders across sprint cadences.
- Architect logging, monitoring, and telemetry to support continuous monitoring.
- Support Zero Trust and secure software supply chain practices.
- Maintain and validate A&A control evidence in eMASS, including control implementation, Security Impact Assessments, security-relevant changes, and Plans of Action and Milestones, to support continuous monitoring and cATO readiness.
- Develop automated security policies in CI/CD, such as GitLab Policies, to flag end-of-life images, remediate pipeline vulnerabilities, prevent unauthorized deployments, and quarantine compromised artifacts.
Desired Qualifications
- An advanced degree in a related technical field is preferred.
- CKS, CKA, AWS, CCSP, or GitLab certifications are preferred.
- Experience developing software with Java/Spring, Python, JavaScript/Node.js, or Angular, and with microservice architectures using REST, JMS, or AMQP, is preferred.
- Experience with Istio and Government software factory environments is preferred.
- Experience supporting Continuous Authority to Operate (cATO) is preferred.
- Experience with secure software supply chain practices, including software bills of materials (SBOM) and artifact signing, is preferred.
- Experience supporting IL4, IL5, or IL6 cloud environments, COT, CPT, or Security Control Assessors is preferred.
- Experience with GitLab security policies, Twistlock, Anchore, Defect Dojo, container signing such as cosign/sigstore, and end-of-life image detection is preferred.
- Active TS/SCI clearance is preferred.
About the company
AnaVation provides IT engineering services to the U.S. Federal Government, focusing on complex technical and analytical challenges. It works by delivering contract-based projects that cover intelligence collection and processing, analytical systems, big data solutions, and cybersecurity, using cross-disciplinary engineering teams (called AnaVators) to tailor solutions to government needs. The company differentiates itself through a government-focused, cost-effective approach, deep technical expertise, and a values-driven culture that emphasizes building long-term partnerships and strong customer trust. Its goal is to help federal agencies improve operational efficiency, security, and decision-making by solving difficult technical problems and delivering reliable, mission-critical software and systems.
Company Size
51-200
Company Stage
N/A
Total Funding
N/A
Headquarters
Reston, Virginia
Founded
2013
Get referred to AnaVation
See people who can refer or advise you
Simplify's Take
What believers are saying
- AnaVation earned 2026 Best Places to Work, supporting recruiting and retention.
- FBI ITSSS-2 and MDA SHIELD expand addressable task orders through 2034.
- Open 2026 hiring for security and litigation support signals ongoing demand.
What critics are saying
- FBI and MDA vehicles intensify competition from Leidos, Booz Allen, and SAIC.
- Award concentration on federal contracts exposes revenue to protest delays and recompetes.
- Without non-government diversification, AnaVation depends on a few agencies and contracting officers.
What makes AnaVation unique
- AnaVation won FBI ITSSS-2, an eight-year, $8B vehicle in 2024.
- AnaVation joined MDA SHIELD in January 2026, a $151B IDIQ pool.
- CMMC Level 2 positions AnaVation for controlled government cyber work.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Health Insurance
- Dental Insurance
- Vision Insurance
- Disability Insurance
- 401(k) Retirement Plan
- 401(k) Company Match
- Paid Vacation
- Paid Holidays
- Professional Development Budget
- Life Insurance