Lead DevSecOps Engineer

• Lead DevSecOps Engineer

• Full time

• Onsite

The Lead DevSecOps Engineer is a strategic and hands-on technical leader responsible for building and advancing the DevSecOps practices, infrastructure, automation, and integration capabilities that support complex DoD software systems. This role leads the design and execution of CI/CD pipelines, system integration testing, test automation, and secure, scalable deployment infrastructure while mentoring engineering teams and ensuring alignment with security and compliance requirements. The Lead DevSecOps Engineer also drives reusable engineering practices, tooling, and deployment patterns that improve consistency, efficiency, and scalability across programs and the broader portfolio.

This position supports the Beyond Line of Sight (BLOS) Engagement Controller and Manager (BECM) program and requires strong software integration engineering, test engineering, and DevSecOps experience to support integration, verification, automation, and documentation efforts in classified, highly regulated environments.

Work Environment: This is a full-time on-site role in Sterling, VA, split between standard office space and SCIF work. Some flexibility in daily working hours is available, coordinated with program needs and facility access windows.

Duties & Responsibilities

System Integration & Test

• Own system integration testing (SIT) across multiple internal subsystems and external systems, identifying issues related to interface contracts, data exchange, timing, usability, functionality, safety, and security
• Define and maintain SWIT and SIT test threads, cases, and steps, and drive traceability from requirements through verification evidence
• Lead integration events with external system owners and government stakeholders, including dry runs, formal test events, and site acceptance activities
• Triage integration defects to root cause across system boundaries and drive them to closure with the responsible team

Test Tooling & Automation Development

• Design, build, and maintain test tooling as a first-class engineering product: simulators, stubs, message injectors, data generators, log analyzers, and results reporting
• Develop automated test suites and utilities, and keep them current as subsystems and external interfaces evolve
• Build and maintain automated regression capability integrated into CI/CD, so integration failures surface early rather than at test events
• Establish standard test reporting and evidence artifacts that satisfy both engineering and compliance consumers

Cross-Program Scalability

• Design integration and test capabilities for reuse, so tooling, harnesses, pipeline templates, and deployment patterns built for BECM can be adopted by adjacent programs with minimal rework
• Identify duplicated effort across programs and consolidate it into shared, versioned, documented components
• Define and champion common standards for interface documentation, test structure, and environment configuration across the engineering organization
• Serve as a technical point of contact for other program teams adopting these capabilities

Infrastructure & DevSecOps

• Use container technologies to configure and deploy software to lab, integration, and customer site environments
• Build and maintain automation pipelines, artifact management, and environment provisioning for both connected and disconnected/classified enclaves
• Embed security and compliance controls into the pipeline rather than bolting them on at the end

Collaboration & Documentation

• Collaborate with cross-functional teams to define, design, and implement new software and its verification approach
• Write and maintain comprehensive documentation for integration, test, and deployment processes
• Mentor engineers on integration engineering, test design, and automation practice
• Stay current with industry trends in software integration, test engineering, and secure delivery

Required Qualifications

• A degree in Science, Technology, Engineering, or Mathematics (STEM) and a minimum of 5 years of relevant experience, or an advanced degree in a related field and a minimum of 3 years of experience
• 2+ years in a technical leadership role
• Demonstrated experience leading system integration and test efforts across multiple subsystems or external systems
• Demonstrated experience designing and building test automation frameworks, harnesses, or test utilities, not just authoring test cases against existing tooling
• Demonstrated experience leading DevSecOps adoption in secure, regulated environments
• Experience building tooling or infrastructure intended for reuse across more than one program, team, or product line
• Experience working in cross-functional software development teams
• Expertise in at least one major public cloud provider (AWS or GCP preferred)
• Experience designing, implementing, and/or supporting cloud native container orchestration platforms and technologies (e.g., Kubernetes, Istio, Helm, Podman, Docker, ArgoCD, Flux)
• Proficiency with Python and testing frameworks such as Pytest; Linux shell scripting and core CLI tooling (grep, awk, sed, ssh, scp); automation pipeline development using tools such as GitLab and Artifactory
• Experience creating test threads, cases, and steps for SWIT and/or SIT
• Active and transferable TS/SCI U.S. government issued security clearance required prior to start date
• U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance

Preferred Qualifications

• Experience testing distributed, real-time, or message-driven systems where timing and ordering matter
• Experience building interface simulators or emulators for systems unavailable in the lab
• Experience with test reporting and results aggregation standards (e.g., JUnit XML, CTRF, Allure)
• Experience with behavior-driven test formats (Gherkin, Cucumber) as a shared artifact between engineering and stakeholders
• Experience with data integration and streaming technologies, including NiFi, Kafka, and REST APIs
• Experience with documentation tools like Swagger
• Experience with modeling tools like Cameo
• AWS Certified Solutions Architect Associate certification
• Certified Kubernetes Administrator certification
• DoD IAT Level II security certification (Security+ CE, GSEC, SSCP, or CCNA Security)

Physical Requirements

• Prolonged periods sitting at a desk and working on a computer.

• Must be able tolift upto 15 pounds at times. 

• This position has an on-site requirement of 5 days per week at a secure controlled information facility in Sterling, VA. 

Clearance Requirements

Some positions willrequire access to U.S. National Security information. Positionsthat require this access will berequiredto receive andmaintaina U.S. government personnel security clearance (PCL). In order toqualify for this position, the candidate must be a US Citizen and either currentlypossessthis National Security eligibility or be able to complete the investigation application process with a favorable determination andmaintainthat eligibility throughout their employment. To learn more about the security clearance process please access this