DevSecOps/HBSS Engineer

Responsibilities

• Design, implement, and maintain DevSecOps pipelines and automation to support continuous integration, delivery, and monitoring.
• Collaborate with engineering teams to improve tooling, development workflows, and system security posture.
• Manage, operate, and optimize AWS cloud services including EC2, VPC, Lambda, S3, EFS, ECR/ECS, EKS, Route53, IAM, RDS, CloudTrail, and CloudWatch.
• Develop and maintain infrastructure-as-code using Terraform.
• Perform security patching and remediation for NiFi, Fortify, SonarQube, Artifactory, and XRay.
• Manage and support CI/CD tools such as Jenkins, Git, Jira, Artifactory, XRay, and SonarQube.
• Develop, deploy, and maintain containerized applications on ECS and EKS.
• Automate operational tasks using Python, Bash, and DevOps tooling.
• Conduct system testing for security, performance, and availability.
• Troubleshoot incidents, identify root causes, and implement corrective actions.
• Maintain architecture, configuration, and troubleshooting documentation.
• Implement security controls aligned with DoD and industry standards.
• Operate and maintain Host-Based Security System (HBSS)/Endpoint Security Solution (ESS) components, including:
• McAfee ePO / HIPSDLPPolicy creation, compliance monitoring, and audit support.
• Support network security components such as firewalls, F5 BigIP, VPN, DNS, SFTP, and TCP/IP-based services.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Engineering, Mathematics, or related field (or equivalent work experience).
• 6+ years (with Master’s) or 8+ years (with Bachelor’s) of relevant DevSecOps, software engineering, cloud engineering, or systems engineering experience.
• Experience developing and maintaining CI/CD and DevSecOps architectures for enterprise systems.
• Hands-on experience with AWS cloud platforms, Terraform, and DevSecOps toolchains.
• Experience patching or remediating NiFi, Fortify, SonarQube, Artifactory, and XRay.
• Experience administering, configuring, and maintaining HBSS/ESS environments including security policies, compliance reporting, and agent deployment.
• Security and Certification Requirements: Secret Clearance with the ability to obtain a T5 Security+ CE HBSS/ESS Administrator or Analyst certifications, such as: HBSS 201: McAfee ePO / Endpoint Security Administration HBSS 301: Advanced HBSS Configuration (or ESS equivalent).
• Ability to obtain and maintain additional DoD cybersecurity certifications as needed.