Senior DevSecOps Engineer

Description Description HyerTek is a federal technology consulting firm delivering secure enterprise applications, data analytics, cloud infrastructure, and modernization solutions to federal government agencies.

HyerTek is hiring a Senior DevSecOps Engineer to own the software supply chain and delivery pipeline behind our federal solutions. The role spans the full delivery cycle from developer commit through hardened container builds, automated security and compliance gates, artifact signing, and controlled releases into Azure Government environments supporting DoW Impact Levels 5, 6, and 7, equivalent classification levels, and other accredited environments as required by the customer.

A successful candidate will incorporate approved AI coding agents into the engineering workflow to accelerate development and automation. These tools will be used to author pipeline and policy-as-code, triage findings, and generate technical documentation and control evidence. The DevSecOps Engineer will make security a built-in property of the pipeline rather than a review at the end of the process, while automating the collection of technical evidence needed to support and maintain an Authority to Operate (ATO).

Candidates must possess a Top Secret security clearance and reside in the Washington, DC, metropolitan area. Some work will be performed at customer facilities, including accredited Secure Areas and SCIFs at Ft. Meade.

Responsibilities

• Design, maintain, and improve secure CI/CD pipelines using GitHub Actions and Azure DevOps across multiple repositories and environments, including disconnected or air-gapped deployments.
• Build and maintain secure containerized applications for Kubernetes platforms such as AKS and OpenShift.
• Integrate automated security and compliance checks into development pipelines, ensuring critical findings are identified, evaluated, and remediated or resolved before release.
• Implement secure artifact management practices, including software bills of materials (SBOMs), artifact signing, provenance attestation, and controlled promotion between environments.
• Manage secrets and environment-specific configuration using approved vault and configuration-management solutions.
• Automate compliance evidence, configuration monitoring, audit logging, and security reporting in support of RMF and ATO requirements.
• Improve application and pipeline observability, reliability, and operational readiness through logging, monitoring, testing, alerting, and incident-response practices.
• Develop and validate backup, recovery, and disaster-recovery procedures with documented recovery objectives.
• Partner with developers, cybersecurity engineers, and operations teams to resolve vulnerabilities, improve delivery processes and support production deployments.
• Create clear technical documentation, operational runbooks, and customer-handoff materials.
• Monitor and troubleshoot CI/CD pipelines, build infrastructure, container registries, deployment processes, and related development-platform services to maintain reliable delivery.
• Establish reusable pipeline patterns, templates, and automation that promote consistent security and deployment practices across projects and environments.

Requirements Required Qualifications

• 5+ years of hands-on DevOps or DevSecOps engineering experience, including responsibility for production CI/CD pipelines in a regulated or security-sensitive environment.
• Strong working knowledge of GitHub Enterprise, including GitHub Actions, repository and organization configuration, access controls, branch protection or rulesets, reusable workflows, and self-hosted runners.
• Experience designing and maintaining CI/CD pipelines in GitHub Enterprise and Azure DevOps across multiple repositories and environments.
• Experience building secure container images using hardened base images, multi-stage builds, vulnerability scanning, minimal dependencies, and non-root runtimes.
• Production experience with Kubernetes platforms such as AKS or OpenShift, including deployment configuration, health probes, secrets integration, and admission-policy requirements.
• Experience integrating automated security controls into CI/CD pipelines, including source-code, dependency, secret, container, and infrastructure-as-code scanning.
• Working knowledge of secure software supply-chain practices, including SBOM generation, artifact signing, provenance attestation, and controlled artifact promotion.
• Proficiency with Infrastructure as Code using Terraform, Bicep/ARM, or a comparable technology.
• Experience with Azure services such as Key Vault, managed identities, Azure Policy, Azure Monitor, Log Analytics, or Microsoft Sentinel.
• Strong scripting and automation skills using Python, PowerShell, JavaScript/Node.js, C#/.NET, or a comparable language.
• Strong Linux fundamentals and command-line troubleshooting skills.
• Familiarity with secrets management, centralized logging, monitoring, backup, recovery, and disaster-recovery practices.
• Strong proficiency in AI platforms including Open AI, Claude, Gemini, and Microsoft CoPilot.
• Excellent troubleshooting, documentation, and stakeholder communication skills.
• Ability to work independently and collaboratively across multiple concurrent engagements and manage priorities.
• DoW 8140 aligned IAT Level II certification, with Security+ CE or an approved equivalent.
• Active Top Secret security clearance required. Candidates must be eligible to obtain and maintain any additional customer-specific access requirements associated with their assigned work.

Preferred Qualifications

• Active TS/SCI security clearance.
• Experience with GitHub Enterprise Server in disconnected or air-gapped environments.
• Experience delivering solutions in Azure Government or DoD Impact Level 5 or higher environments.
• Familiarity with RMF, NIST SP 800-53, DISA STIGs, and the DoD Cloud Computing SRG.
• Experience with DoD Iron Bank, Platform One, or comparable hardened-container programs.
• Experience supporting an RMF authorization, continuous ATO initiative, or automated compliance-evidence pipeline.
• Experience transferring software artifacts into air-gapped or cross-domain environments.
• Experience with Kubernetes policy tools such as OPA/Gatekeeper or Kyverno.
• Experience implementing artifact attestation, signing, provenance, or software supply-chain policy enforcement.
• Experience with production secrets rotation, SIEM integration, audit-log retention, and tested disaster-recovery procedures.
• CISSP, CASP+, or another advanced security certification.

HyerTek Offers a Comprehensive Benefits Package, Including

• Medical, dental, and vision insurance
• 401(k) with employer contribution
• Paid time off (PTO) and company holidays
• Professional development and certification support
• Employee assistance program (EAP)
• Life and disability insurance

Clearance & Work Authorization This position requires U.S. citizenship and an active TS security clearance with the Department of War. The candidate must be able to obtain and maintain SCI eligibility; an active TS/SCI clearance is strongly preferred. Candidates must be authorized to work in the United States without the need for employment-based visa sponsorship now or in the future. HyerTek will not sponsor applicants for a U.S. work visa status for this opportunity.

Salary Range The anticipated salary range for this position is $145,000 – $186,500 annually. Final compensation will be based on relevant experience, technical qualifications, certifications, clearance status, and contract requirements.

Equal Employment Opportunity (EEO) HyerTek is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, age, or any other status protected by applicable federal, state, or local law.