Posted 24 days ago
USAF - DevSecOps EngineercFocus Software · Linthicum Heights
USAF - DevSecOps Engineer
Linthicum HeightsOn-siteFull-time
AI Summary
Builds, operates and maintains CI/CD pipelines, infrastructure as code and automated security controls for USAF systems, supporting ATO evidence and continuous monitoring. Works on-site in Linthicum Heights, MD with an active TS/SCI clearance required.
About this role
cFocus Software seeks a DevSecOps Engineer to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD. This position requires an Active TS/SCI clearance.
Qualifications:
Qualifications:
- Active TS/SCI clearance
- B.S. Computer Science, Information Technology, or a related field
- Experience building and maintaining CI/CD pipelines for enterprise applications and infrastructure.
- Proficiency in scripting or programming for infrastructure automation and software delivery.
- Experience implementing IaC, CaC, source control, and configuration management practices.
- Ability to integrate testing, cybersecurity controls, scanning, and remediation into delivery workflows.
- Experience supporting on-premises, cloud, or hybrid environments and repeatable deployments.
- Working knowledge of STIGs, secure baselines, authorization boundaries, and ATO evidence.
- Experience with monitoring, logging, alerting, troubleshooting, and incident support.
- Strong technical documentation and collaboration skills across development, security, and operations
- Implement the Government-approved DevSecOps strategy, cultural principles, policies, and processes in support of enterprise IT architecture, cloud, and data initiatives.
- Create, operate, and maintain Continuous Integration/Continuous Deployment (CI/CD) pipelines for infrastructure and applications with approved security guardrails.
- Implement Infrastructure as Code (IaC) and Configuration as Code (CaC) in accordance with Government-approved designs and configuration baselines.
- Automate Government-specified cybersecurity controls and checks within pipelines; coordinate remediation and validation with cybersecurity personnel.
- Implement continuous monitoring, observability, logging, alerting, and reporting for system availability and cybersecurity status.
- Implement data tagging and attribution mechanisms across assigned resources under the approved data governance policy.
- Maintain configuration management capabilities to document and track system and software changes under the approved Configuration Management Plan.
- Implement technical controls enforcing Government-defined boundaries; provide evidence, documentation, and monitoring data for Authority to Operate (ATO) and continuous ATO activities.
- Develop and maintain scripts to apply Security Technical Implementation Guides (STIGs) and generate or update network diagrams and system configurations from live environments.
- Manage versioned CI/CD pipeline artifacts to maintain consistency across on-premises, cloud, and hybrid environments under the approved enterprise architecture.
- Develop, integrate, and test software solutions; prepare releases for Government review and authorized deployment following successful testing.
- Maintain visibility and traceability throughout the software lifecycle, linking requirements, code, configurations, tests, changes, and releases.
- Conduct regular vulnerability scans through pipelines, analyze findings, recommend remediation, and implement approved patches and configuration corrections.
- Support incident response by executing approved procedures, providing system data and logs, and implementing directed corrective actions.
- Research, test, and recommend agentic AI and other AI capabilities for CI/CD efficiency; integrate selected capabilities following Government approval.
Skills
ATO EvidenceCI/CD PipelinesCloud EnvironmentsConfiguration As CodeConfiguration ManagementContinuous MonitoringIncident ResponseInfrastructure As CodeLogging And AlertingOn-premises EnvironmentsScriptingSource ControlSTIGsTS/SCI ClearanceVulnerability Scanning
Explore related jobs
More jobs at cFocus Software
- CFBI - Systems Administrator - CI Poly REQUIREDWashington, DC
- CFBI - Systems Analyst - CI Poly REQUIREDHuntsville, AL
- CFBI - Data Engineer - CI Poly REQUIREDHuntsville, AL
- CFBI - IT Project Lead - CI Poly REQUIREDHuntsville, AL
- CFBI - Information Security Specialist - CI Poly REQUIREDWashington, DC
- CFBI - GIS Systems Engineer - CI Poly REQUIREDHuntsville, AL
Similar ATO Evidence jobs
- ZISSO Support and Continuous ATO Evidence EngineerZaden Technologies, Inc. · Remote (United States), Huntsville
- I
Security EngineerInadev · Reston, Virginia - N
Cyber Risk & Assessment AnalystNORTH STONE LLC · Washington, District of Columbia - PDevSecOps / CI/CD EngineerPeraton · Chantilly, VA
- P
Cybersecurity EngineerPueo Business Solutions · McLean, Virginia - IJunior Security EngineerInadev · Reston, Virginia
Jobs in Linthicum Heights
- TTask/Data Task LeadTechnica Corporation · Linthicum Heights, MD
- TProgram ManagerTechnica Corporation · Linthicum Heights, MD
- TServices Task/ Strategy Support/ Cybersecurity Task LeadTechnica Corporation · Linthicum Heights, MD
- L
Sr. Cybersecurity Systems EngineerLEIDOS, INC. · Linthicum Heights, Maryland - N
Branch Manager-On SiteNorthrop Grumman Federal Credit Union · Linthicum Heights, MD - LCybersecurity Systems EngineerLEIDOS, INC. · Linthicum Heights, Maryland
Browse these categories
Market data for this role
All reports →- SeriesRole reportsOne role family at a time: how many openings, what changed this week, who is hiring, what it pays.
- SeriesSalary reportsWhat employers publish in job postings, by level and workplace. Not self-reported pay.
- Market overviewState of tech hiring, September 2026: up 4.8%Tech hiring rose 4.8% month over month in September 2026, with 411,122 new listings. Customer support and account executive roles led the growth.