The Role
Build and maintain secure CI/CD pipelines across on-premises, cloud, and hybrid environments. Implement Infrastructure as Code, Configuration as Code, cybersecurity controls, STIG compliance, monitoring, vulnerability remediation, configuration management, and ATO evidence processes. Develop automation scripts, support incident response, maintain software traceability, and integrate approved AI capabilities into DevSecOps workflows. The role is on-site in Linthicum Heights, Maryland, and requires an active TS/SCI clearance.
Summary Generated by Built In
cFocus Software seeks a DevSecOps Engineer to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD. This position requires an Active TS/SCI clearance.
Qualifications:
Qualifications:
- Active TS/SCI clearance
- B.S. Computer Science, Information Technology, or a related field
- Experience building and maintaining CI/CD pipelines for enterprise applications and infrastructure.
- Proficiency in scripting or programming for infrastructure automation and software delivery.
- Experience implementing IaC, CaC, source control, and configuration management practices.
- Ability to integrate testing, cybersecurity controls, scanning, and remediation into delivery workflows.
- Experience supporting on-premises, cloud, or hybrid environments and repeatable deployments.
- Working knowledge of STIGs, secure baselines, authorization boundaries, and ATO evidence.
- Experience with monitoring, logging, alerting, troubleshooting, and incident support.
- Strong technical documentation and collaboration skills across development, security, and operations
- Implement the Government-approved DevSecOps strategy, cultural principles, policies, and processes in support of enterprise IT architecture, cloud, and data initiatives.
- Create, operate, and maintain Continuous Integration/Continuous Deployment (CI/CD) pipelines for infrastructure and applications with approved security guardrails.
- Implement Infrastructure as Code (IaC) and Configuration as Code (CaC) in accordance with Government-approved designs and configuration baselines.
- Automate Government-specified cybersecurity controls and checks within pipelines; coordinate remediation and validation with cybersecurity personnel.
- Implement continuous monitoring, observability, logging, alerting, and reporting for system availability and cybersecurity status.
- Implement data tagging and attribution mechanisms across assigned resources under the approved data governance policy.
- Maintain configuration management capabilities to document and track system and software changes under the approved Configuration Management Plan.
- Implement technical controls enforcing Government-defined boundaries; provide evidence, documentation, and monitoring data for Authority to Operate (ATO) and continuous ATO activities.
- Develop and maintain scripts to apply Security Technical Implementation Guides (STIGs) and generate or update network diagrams and system configurations from live environments.
- Manage versioned CI/CD pipeline artifacts to maintain consistency across on-premises, cloud, and hybrid environments under the approved enterprise architecture.
- Develop, integrate, and test software solutions; prepare releases for Government review and authorized deployment following successful testing.
- Maintain visibility and traceability throughout the software lifecycle, linking requirements, code, configurations, tests, changes, and releases.
- Conduct regular vulnerability scans through pipelines, analyze findings, recommend remediation, and implement approved patches and configuration corrections.
- Support incident response by executing approved procedures, providing system data and logs, and implementing directed corrective actions.
- Research, test, and recommend agentic AI and other AI capabilities for CI/CD efficiency; integrate selected capabilities following Government approval.
Skills Required
- Active TS/SCI clearance
- Bachelor’s degree in Computer Science, Information Technology, or a related field
- Experience building and maintaining CI/CD pipelines for enterprise applications and infrastructure
- Proficiency in scripting or programming for infrastructure automation and software delivery
- Experience implementing Infrastructure as Code, Configuration as Code, source control, and configuration management practices
- Ability to integrate testing, cybersecurity controls, scanning, and remediation into delivery workflows
- Experience supporting on-premises, cloud, or hybrid environments and repeatable deployments
- Working knowledge of STIGs, secure baselines, authorization boundaries, and ATO evidence
- Experience with monitoring, logging, alerting, troubleshooting, and incident support
- Strong technical documentation and collaboration skills across development, security, and operations
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Established in 2006, cFocus Software automates FedRAMP compliance and develops government chatbots for the Azure Government Cloud, Office 365, and SharePoint. cFocus Software is the exclusive vendor of ATO (Authority To Operate) as a Service™, which automates FedRAMP compliance for the Azure Government Cloud and Office 365. Contact Us for a demo of ATO as a Service™ or a FREE government chatbot proof of concept project today!
