Innovative Defense Technologies

Automated software testing and defense cybersecurity.

DevSecOps Engineer

DevOps EngineeringConfirmed live in the last 24 hours

Full-timeSan Diego, CA, USA$114k - $184k

About the Job

Requirements

A bachelor's degree in Cyber Security, Information Assurance, Computer Science, or Information Technology, or equivalent full-time professional experience.
Meet DoD 8570/8140 baseline requirements through an approved IAM Level 1 certification (Security+, SSCP, or GSEC), or a qualifying degree recognized by the DoD 8140 educational matrix.
At least 5 years of cybersecurity or systems engineering experience within the Defense Industrial Base, with mastery of the Risk Management Framework.
Ability to travel up to 10% of the time as needed.
Obtain and maintain an active Secret U.S. Security Clearance.

Responsibilities

Help design and implement secure, high-performance architectures for autonomous systems, AI-driven platforms, and edge-computing devices.
Embed automated security gates (SAST, DAST, IAST, and SRM) into CI/CD pipelines.
Lead the transition from static RMF cycles to Continuous Authority to Operate by automating control verification and continuous monitoring.
Architect secure multi-tenant environments using Type-1 hypervisors and Kubernetes for IL5/IL6 mission sets.
Engineer Identity, Credential, and Access Management solutions that enforce Zero Trust principles across distributed hardware and software nodes.
Lead RMF efforts across categorization, control selection, control implementation, assessment, authorization, and continuous monitoring.
Develop and maintain RMF artifacts, including SSPs, SARs, SAPs, POA&Ms, inventories, architecture diagrams, and continuous monitoring documentation.
Coordinate with U.S. Navy Authorizing Officials, Security Control Assessors, ISSMs, ISSOs, and Program Managers; perform regular server updates, patch management, and software installations.
Manage cybersecurity authorization packages and support (I)ATO and (I)ATT activities.
Perform ACAS scans on devices across multiple systems as needed.
Collect, review, and submit STIG checklists for RMF processes.
Develop and maintain access control policies for organizational assets.
Remediate vulnerabilities and document POA&Ms.
Work with developers and engineers to implement, maintain, and review security processes, maintain compliance, and ensure user permissions are appropriate.
Develop and maintain golden images, including operating system images and virtual machines.
Create and maintain detailed system and network documentation for technical and non-technical stakeholders.
Serve as the appointed Information System Security Officer for product-level ATOs and DCSA-authorized information systems, supporting security authorization and compliance with applicable cybersecurity policies, standards, and regulatory requirements.
Perform continuous monitoring activities as assigned by the ISSM and in accordance with RMF requirements and the approved SSP, including vulnerability assessments, security control assessments, STIG compliance, POA&M management, and ongoing evaluation of system security posture.
Coordinate with the ISSM on information system security matters and serve as the on-site representative for DSCA-related activities.

Desired Qualifications

Experience navigating the Department of the Navy RAISE 2.0 process to achieve continuous cyber readiness and inherit platform ATO (cATO/eATO) for containerized mission applications.
Familiarity with the Overmatch Software Armory or similar Navy DevSecOps platforms/RAISE Platforms of Choice for pipeline execution, automated security gating, SBOM generation, and container scanning.
Familiarity with deploying, hardening, or integrating software services within Navy tactical environments, specifically ACS and CANES architectures.
Proficiency in CI/CD pipelines, including automated STIG compliance, SAST/DAST, vulnerability remediation, and container hardening to meet Navy Cyber Ready directives.
Expert-level knowledge of securing OCI-compliant containers (Docker) and Kubernetes clusters, including network policies, service meshes (Istio), and runtime security.
Significant experience with server virtualization (ESXi, KVM) and desktop virtualization (VDI), including hardware-root-of-trust and secure hypervisor configuration.
Firm grasp of Infrastructure as Code deployments using Terraform, Ansible, or CloudFormation.
Experience with automated security assessment tools (ACAS/Nessus, SCAP) and technical integration of security data into eMASS.
Experience configuring multiple forms of authentication, including PKI concepts.
Experience identifying hardware and/or software for purchase to meet various use cases.
Experience with Ansible, PowerShell, Chef, Salt, Puppet, or other configuration automation software.
DoD 8570/8140 IAM Level III certification (CISSP or CISM).

About The Role:

Innovative Defense Technologies (IDT), a leading defense technology company, is seeking a DevSecOps Engineer to be part of our Integrated Mission Systems (IMS) team and based out of our San Diego, CA location.

This DevSecOps Engineer will lead and support cybersecurity accreditation activities for mission-critical Department of War systems, including Authority to Operate (ATO) efforts, Risk Management Framework (RMF) implementation, vulnerability management, continuous monitoring through the Navy and DoW’s DevSecOps deployment pipelines, and security engineering activities supporting U.S. Navy programs. Duties will also include providing and maintaining documentation for processes and procedures, while also providing support to internal engineers or customers on-site.

Clearance & Location Requirements:

All applicants must be able to obtain/maintain an active Secret U.S. Security Clearance.
This is an on-site position. Requiring at least 4 days in office, based out of our San Diego, CA location and nearby government facilities.

What You Will Do:

Help design and implement secure, high-performance architectures for autonomous systems, AI-driven platforms, and edge-computing devices.
Embed automated security gates (SAST, DAST, IAST, SRM) into CI/CD pipelines to ensure that security is "code-driven" rather than a manual bottleneck.
Lead the transition from static RMF cycles to Continuous Authority to Operate (cATO) by automating control verification and continuous monitoring.
Architect secure multi-tenant environments using virtualized (Type-1 Hypervisors) and containerized orchestration (Kubernetes) tailored for IL5/IL6 mission sets.
Engineer Identity, Credential, and Access Management (ICAM) solutions that enforce Zero Trust principles across distributed hardware and software nodes.
Lead RMF efforts across all six RMF steps including Categorization, Control Selection, Control Implementation, Assessment, Authorization, and Continuous Monitoring.
Develop and maintain RMF artifacts including SSPs, SARs, SAPs, POA&Ms, inventories, architecture diagrams, and continuous monitoring documentation.
Coordinate directly with U.S. Navy Authorizing Officials (AOs), Security Control Assessors (SCAs), ISSMs, ISSOs, and Program Managers. Performing regular server updates, patch management, and software installations.
Manage cybersecurity authorization packages and support (I)ATO & (I)ATT activities.
As needed, performing ACAS Scans on various devices across multiple systems
Collect, review, and submit various STIG checklists for RMF processes
Develop and maintain access control policies for various organization assets
Remediate Vulnerabilities and documenting POAMs as required.
Work with developers and engineers to implement, maintain, and review security processes to maintain compliance and ensure user permissions are accordingly
Help develop and maintain various golden images in support of business area activities to include operating system images and virtual machines.
Create and maintain detailed documentation of systems and networks for usage by both technical and non-technical stake holders
Serve as the appointed Information System Security Officer (ISSO) for product-level Authorizations to Operate (ATOs) and DCSA authorized information systems, supporting security authorization activities and ensuring compliance with applicable cybersecurity policies, standards, and regulatory requirements.
Perform continuous monitoring (ConMon) activities as assigned by the Information System Security Manager (ISSM) and in accordance with established Risk Management Framework (RMF) requirements and the approved System Security Plan (SSP), including vulnerability assessments, security control assessments, STIG compliance, Plan of Action and Milestones (POA&M) management, and ongoing evaluation of the system security posture to maintain authorization compliance.
Coordinate with the ISSM on all information system security matters and serve as the on-site representative for DSCA-related activities.

Who You Are (Required):

Bachelor’s Degree in in Cyber Security, Information Assurance, Computer Science, Information Technology or equivalent full-time professional experience
Must satisfy DoD 8570/8140 baseline requirements through either:
- Approved 8570/8140 IAM Level 1 certification (Security+, SSCP, GSEC); or
- Relevant qualifying degree (Cybersecurity, Computer Science, IT, or related STEM discipline) recognized by the DoD 8140 educational matrix.
5+ years experience in Cybersecurity or Systems Engineering within the Defense Industrial Base (DIB), with a mastery of the Risk Management Framework (RMF).
Ability to travel up to 10% of the time as needed

What Makes You Stand Out:

5+ years in Cybersecurity or Systems Engineering within the Defense Industrial Base (DIB), with a mastery of RMF; this includes:
- Experience navigating the Department of the Navy RAISE 2.0 process to achieve continuous cyber readiness and inherit platform Authority to Operate (cATO/eATO) for containerized mission applications.
- Familiarity with the Overmatch Software Armory (or similar Navy DevSecOps Platforms / RAISE Platforms of Choice) for pipeline execution, automated security gating, SBOM generation, and container scanning.
- Familiarity with deploying, hardening, or integrating software services within Navy tactical environments, specifically ACS and CANES architectures.
- Proficient in CI/CD pipelines, including automated STIG compliance, SAST/DAST, vulnerability remediation, and container hardening to meet Navy Cyber Ready directives.
Expert-level knowledge of securing OCI-compliant containers (Docker) and Kubernetes (K8s) clusters, including network policies, service meshes (Istio), and runtime security.
Significant experience with Server Virtualization (ESXi, KVM) and Desktop Virtualization (VDI), including hardware-root-of-trust and secure hypervisor configuration.
Firm grasp of Infrastructure as Code (IaC) deployments of secure, reproducible environments using Terraform, Ansible, or CloudFormation.
Experience with automated security assessment tools (ACAS/Nessus, SCAP) and the technical integration of security data into eMASS.
Experience with configuring multiple forms of authentication to include PKI concepts.
Experience with having to identify hardware and/or software for purchase to meet various use-cases.
Experience with Ansible, PowerShell, Chef, Salt, Puppet, or any other configuration automation software.
DoD 8570/8140 IAM Level III (CISSP, CISM) Certified

If you see yourself reflected in this role and are excited about the impact you could make, we encourage you to apply! If you know someone who may be a great fit, please feel free to share this opportunity with your network.

Pay Range*: $114,000 - $184,000

*Pursuant to California Senate Bill 1162, IDT is required to disclose the “pay scale” or “pay range” associated with a job posting. Notably, however, this amount may not be reflective of actual compensation that may be earned as pay is dependent on a candidate’s experience, skills, and education. The posted range does not include bonuses, commissions, tips, or other benefits. Click here for additional information about Senate Bill 1162. IDT is often looking to place multiple candidates at various levels. Therefore, more than one pay range has been included, commensurate with experience.

About the Company

Innovative Defense Technologies

Automated software testing and defense cybersecurity.

IDT automates software testing, data analysis, and cybersecurity for Department of Defense mission-critical systems, using its patented Automated Test and ReTest (ATRT) technology to support the full software testing lifecycle from component tests to system integration and results analysis. The product automates test execution, configuration assessment, and result reporting, offering repeatable tests, on-demand regression checks for cyber threats, and statistically rigorous analysis to cut time and manpower. Its differentiation comes from the ATRT patent and its ability to tailor automated testing across large, complex systems for defense needs. The company's goal is to help field new software capabilities faster and more affordably by reducing the time and cost spent on software testing.

Company size: 201-500
Company stage: Grant
Total funding: $1.6M
Headquarters: Arlington County, VA
Founded: 2006

Recently Posted Jobs

Explore more opportunities at Innovative Defense Technologies

See more jobs