DevSecOps Engineer

DevSecOps Engineer The Opportunity:  Today’s dynamic technology landscape demands constant and rapid innovation. To facilitate this transformation, we must ensure continuous integration and application development. That’s why we need you, an experienced DevOps engineer who’s eager to design, test, and program critical applications for our clients who need them most. Are you looking for an opportunity not just to automate pipelines, but to architect secure, compliant, cloud-ready developer platforms that have a direct impact in the defense industry? As a DevSecOps Engineer, you’ll lead end-to-end platform design—from build systems to deployment frameworks—for software operating inside ATO’d environments. Using agile lifecycle development and Git-based workflows, you’ll partner with engineering teams to enable scalable repos, secure CI/CD automation, and cloud infrastructure that meets rigorous accreditation requirements. What You’ll Do: Design and maintain repo architecture using Nx or Turborepo, including incremental builds, caching, and task orchestration. Architect secure CI/CD pipelines aligned with NIST 80053, RMF controls, STIG baselines, and continuous monitoring requirements in ATO’d environments. Implement software supply-chain protections including SBOM generation, artifact signing, provenance, and vulnerability scanning. Build and manage cloud-native platform infrastructure using Docker, Kubernetes, and Git-based workflows across AWS and Azure. Establish logging, monitoring, and observability, such as OpenTelemetry, metrics, or audit trails that satisfy accreditation and audit readiness. Integrate SAST/DAST, SCA, and compliance checks into automated pipelines; enforce security-by-design and configuration baselines. Define patterns for secrets management, identity and access controls, and boundary protections for accredited systems. Mentor engineers; review architectures and pipelines; champion SDLC best practices, release safety, and documentation. Join us. The world can’t wait.  You Have: 5+ years of experience in the development of tools and processes to drive DevOps or DevSecOps maturity by automating builds, platform engineering, or secure software delivery in production systems 2+ years of experience implementing repo tooling with Nx or Turborepo Experience building and operating CI/CD pipelines inside ATO’d or RMF-governed environments, including security control implementation Experience with Docker, Kubernetes, and cloud platforms, such as AWS or Azure Experience implementing supply-chain security, vulnerability scanning, and compliance gates Knowledge of Git workflows, REST APIs, and automated testing frameworks Ability to travel up to 25% Ability to obtain a Secret clearance Bachelor's degree or 8+ years of experience in DevOps in lieu of a degree Nice If You Have: Experience creating and improving continuous automation across multiple technical stacks  Experience triaging and resolving issues related to both open source and commercial tools in public cloud environments Experience with policy-as-code, such as OPA/Gatekeeper, OSCAL, or compliance automation Experience with service meshes, hardened baselines, or advanced cloud security Experience integrating DevSecOps practices with realtime or streaming systems Knowledge of scripting languages such as Python or Linux Shell Script Secret clearance Master’s degree  Clearance: Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional