DevSecOps Engineer

DevSecOps Engineer

The Opportunity: 
Today’s dynamic technology landscape demands constant and rapid innovation. To facilitate this transformation, we must ensure continuous integration and application development. That’s why we need you, an experienced DevOps engineer who’s eager to design, test, and program critical applications for our clients who need them most.

Are you looking for an opportunity not just to automate pipelines, but to architect secure, compliant, cloud-ready developer platforms that have a direct impact in the defense industry? As a DevSecOps Engineer, you’ll lead end-to-end platform design—from build systems to deployment frameworks—for software operating inside ATO’d environments. Using agile lifecycle development and Git-based workflows, you’ll partner with engineering teams to enable scalable repos, secure CI/CD automation, and cloud infrastructure that meets rigorous accreditation requirements.

What You’ll Do:

• Design and maintain repo architecture using Nx or Turborepo, including incremental builds, caching, and task orchestration.

• Architect secure CI/CD pipelines aligned with NIST 80053, RMF controls, STIG baselines, and continuous monitoring requirements in ATO’d environments.

• Implement software supply-chain protections including SBOM generation, artifact signing, provenance, and vulnerability scanning.

• Build and manage cloud-native platform infrastructure using Docker, Kubernetes, and Git-based workflows across AWS and Azure.

• Establish logging, monitoring, and observability, such as OpenTelemetry, metrics, or audit trails that satisfy accreditation and audit readiness.

• Integrate SAST/DAST, SCA, and compliance checks into automated pipelines; enforce security-by-design and configuration baselines.

• Define patterns for secrets management, identity and access controls, and boundary protections for accredited systems.

• Mentor engineers; review architectures and pipelines; champion SDLC best practices, release safety, and documentation.

Join us. The world can’t wait. 

You Have:

• 5+ years of experience in the development of tools and processes to drive DevOps or DevSecOps maturity by automating builds, platform engineering, or secure software delivery in production systems

• 2+ years of experience implementing repo tooling with Nx or Turborepo

• Experience building and operating CI/CD pipelines inside ATO’d or RMF-governed environments, including security control implementation

• Experience with Docker, Kubernetes, and cloud platforms, such as AWS or Azure

• Experience implementing supply-chain security, vulnerability scanning, and compliance gates

• Knowledge of Git workflows, REST APIs, and automated testing frameworks

• Ability to travel up to 25%

• Ability to obtain a Secret clearance

• Bachelor's degree or 8+ years of experience in DevOps in lieu of a degree

Nice If You Have:

• Experience creating and improving continuous automation across multiple technical stacks 

• Experience triaging and resolving issues related to both open source and commercial tools in public cloud environments

• Experience with policy-as-code, such as OPA/Gatekeeper, OSCAL, or compliance automation

• Experience with service meshes, hardened baselines, or advanced cloud security

• Experience integrating DevSecOps practices with realtime or streaming systems

• Knowledge of scripting languages such as Python or Linux Shell Script

• Secret clearance

• Master’s degree 

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Salary at Booz Allen is determined by various factors, including but not limited to location, the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $77,500.00 to $176,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen’s total compensation package for employees. This posting will close within 90 days from the Posting Date.

Identity Statement

As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

Candidate AI Usage Policy

AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided.

Work Model
Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.

• Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.

• Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.

• Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.