Senior DevSecOps Engineer IRES - SSFB/HSV/FBEL
Amentum · Colorado Springs, CO · 1 mo ago
On-siteEngineeringFull-time
We need to output only HTML fragment, with headings for sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Use
for sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Use - for any list of duties/requirements/benefits, and
for prose. Do NOT repeat job title as heading. Do NOT put Job ID/requisition numbers as headings. Remove boilerplate, navigation, legal, EEO, etc. Include only sections with real specific content.
We have content: location, relocation assistance, remote/telework, clearance type, shift, travel required, description of duties (multiple subparts). Also "The successful candidate will:" bullet points (communication skills, resumes format). Then Basic Requirements list. Desired Requirements list. Desired Certifications list. Compensation Details (pay range). Benefits Overview list. Also note about posting duration etc (maybe not needed). Also "Original Posting" dates maybe not needed. Also "Amentum anticipates..." maybe not needed. Also EEO boilerplate to remove.
We need to decide sections: About the role (maybe a brief summary). Responsibilities (description of duties). Requirements (basic requirements). Qualifications (maybe desired requirements? Or could combine). Skills (maybe desired certifications? Or skills list). Benefits (benefits overview). Pay (compensation details). Schedule (maybe shift, travel, etc). We need to include only sections with real specific content.
We have location etc; maybe include in About the role? Could include location, clearance, shift, travel as part of About the role.
We must not invent placeholder text. Must preserve all substantive info.
Let's extract:
- Position Title: Senior DevSecOps Engineer (not used as heading)
- Location: Schriever Space Force Base, Colorado Springs, CO, Redstone Arsenal, Huntsville, AL, or Fort Belvoir, VA
- Relocation Assistance: None available at this time
- Remote/Telework: NO - Not available for this position
- Clearance Type: DoW Secret
- Shift: Day shift
- Travel Required: Up to 10% of the time
- Description of Duties: long paragraph plus sub-bullets (though they are not bullet list but sentences). We can treat as prose or list. The instruction: Use
- for any list of duties/requirements/benefits. The description includes multiple duty areas each starting with bold headings (Cloud-Native Platform Engineering, etc). Could treat each as list item.
We need to preserve all substantive info; we can convert each duty area into
- .
- The successful candidate will: Have strong written and verbal communication skills, including the ability to collaborate across technical teams and brief leadership or Government stakeholders. Resumes, in month and year format, must be submitted with application in order to be considered for the position. The selected candidate may be assigned as an employee for one of our teammate companies.
That's more like requirements? Could be part of Requirements or Qualifications.
- Basic Requirements: list of must-haves.
- Desired Requirements: list.
- Desired Certifications: list.
- Compensation Details: $175,000 – $220,000 plus note.
- Benefits Overview: list of benefits.
We need to avoid boilerplate like "This position will be posted for a minimum of 3 days..." etc. Also remove EEO.
Now decide sections:
About the role: could include location, clearance, shift, travel, relocation, remote.
Responsibilities: description of duties (list).
Requirements: basic requirements (must-haves). Could also include "The successful candidate will" communication skills and resume format.
Qualifications: desired requirements (education, experience). Could also include desired certifications as Skills? Or separate.
Skills: maybe desired certifications? Or combine desired requirements and certifications under Skills? But we need to follow instruction: Use headings for sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We can decide to use only those that have content.
We have content for About the role (location etc). Responsibilities (duties). Requirements (basic requirements). Qualifications (desired requirements). Skills (desired certifications). Benefits (benefits overview). Pay (compensation). Schedule (shift, travel). That seems reasonable.
We must not create sections with filler like "commensurate with experience". We have actual specifics.
Now produce HTML.
Structure:
About the role
Location: Schriever Space Force Base, Colorado Springs, CO; Redstone Arsenal, Huntsville, AL; or Fort Belvoir, VA. Relocation Assistance: None available at this time. Remote/Telework: Not available. Clearance Type: DoW Secret. Shift: Day shift. Travel Required: Up to 10% of the time.
Responsibilities
- Cloud-Native Platform Engineering: Design, implement, and maintain scalable cloud and container platform solutions supporting NGE mission applications across environments including Azure Kubernetes Service (AKS), AWS Elastic Container Service (ECS), and Red Hat OpenShift Container Platform (OCP).
- DevSecOps Pipeline Automation: Engineer, enhance, and sustain CI/CD pipelines that integrate automated build, test, security scanning, release, and deployment workflows to accelerate software delivery while maintaining compliance and operational stability.
- Infrastructure as Code (IaC) & Configuration Automation: Develop and maintain automated infrastructure provisioning and configuration management solutions using tools such as Terraform, Helm, Ansible, and Bash, enabling repeatable, version-controlled deployments across development, test, and production environments.
- Container Security & Compliance: Implement container hardening, image assurance, secrets management, and runtime security controls aligned to DoD, MDA, RMF, DISA STIG, and Zero Trust requirements. Support continuous monitoring and compliance validation for containerized workloads and platform services.
- Hybrid Cloud Integration: Assess existing application and infrastructure architectures and develop migration and integration strategies for cloud-enabled and containerized environments. Ensure interoperability between legacy services, cloud-native platforms, and enterprise mission systems.
- Platform Architecture & Service Enablement: Support the design and evolution of resilient platform services that host modern applications and shared capabilities across IaaS and PaaS ecosystems, including orchestration, service networking, observability, policy enforcement, and secure access patterns.
- Cross-Functional Engineering Collaboration: Partner with software developers, systems engineers, network engineers, cybersecurity teams, database administrators, and Government stakeholders to ensure cohesive integration of infrastructure, applications, and security controls across the NGE ecosystem.
- Operational Sustainment & Troubleshooting: Monitor, troubleshoot, and resolve complex platform, integration, and deployment issues across Kubernetes and cloud-hosted environments. Improve operational resilience through automation, root cause analysis, and proactive engineering improvements.
- Database & Application Hosting Support: Support deployment and sustainment of cloud-hosted and containerized application data services, including technologies such as PostgreSQL, Cassandra, and MySQL, ensuring secure configuration, availability, and performance alignment with mission requirements.
- Documentation & Engineering Governance: Develop and maintain technical documentation including implementation plans, pipeline designs, architecture diagrams, deployment procedures, standard operating procedures, and configuration baselines to support lifecycle management and operational continuity.
- Technology Evaluation & Continuous Improvement: Evaluate emerging DevSecOps, platform engineering, and cloud technologies to improve automation, scalability, security, cost efficiency, and mission responsiveness across the NGE environment.
- Stakeholder Reporting & Technical Communication: Provide technical status, risk identification, engineering recommendations, and platform capability assessments to program leadership and Government stakeholders. Translate complex platform and automation topics into mission-relevant impacts and decisions.
Requirements
- Must have 12 or more years of general (full-time) work experience (may be reduced with completion of advanced education).
- Must have 6 or more years of directly related progressive experience in DevSecOps, platform engineering, systems integration, cloud engineering, or related infrastructure engineering roles.
- Must have 1 or more years of experience working in a management or leadership role.
- Must have demonstrated experience designing, deploying, and sustaining Kubernetes-based or other containerized platforms in enterprise environments.
- Must have demonstrated experience with one or more cloud platforms such as AWS, Azure, or Red Hat OpenShift.
- Must have experience building and maintaining CI/CD pipelines, automation workflows, and secure software delivery processes.
- Must have experience with Infrastructure-as-Code and configuration automation tools such as Terraform, Helm, Ansible, and scripting languages such as Bash.
- Must have a strong understanding of containerization technologies such as Docker and Kubernetes, including deployment, orchestration, scaling, and lifecycle management.
- Must be familiar with security controls and compliance requirements applicable to cloud and platform engineering environments, including RMF, DISA STIGs, Zero Trust, and secure hardening practices.
- Must be able to analyze complex technical problems spanning multiple organizations, systems, and engineering disciplines and develop practical, scalable solutions.
- Must have a baseline DoD 8140/IAT certification, such as Security+ CE.
- Must have an active DoW Secret Security Clearance.
- The successful candidate will have strong written and verbal communication skills, including the ability to collaborate across technical teams and brief leadership or Government stakeholders.
- Resumes must be submitted in month and year format with application to be considered for the position.
- The selected candidate may be assigned as an employee for one of our teammate companies.
Qualifications
- Have a Bachelor’s degree, or higher, in Computer Science, Information Technology, Engineering, or a related technical field.
- Have experience supporting the Missile Defense Agency (MDA) or other DoD enterprise modernization programs.
- Have experience with Coder Platform or comparable cloud development workspace platforms.
- Have experience implementing platform observability, logging, monitoring, and alerting capabilities in cloud-native environments.
- Be familiar with continuous Authority to Operate (cATO) concepts and security automation within DevSecOps pipelines.
- Have experience supporting hybrid cloud migration, application modernization, and legacy system integration efforts.
- Have experience working in Agile, Scrum, or other iterative delivery models in mission or enterprise IT environments.
- Have experience evaluating and recommending technologies based on cost, mission impact, technical risk, and operational sustainment considerations.
- Have experience with secure database deployment and sustainment in cloud-hosted or containerized environments.
Skills
- Security+ CE (required baseline if used to satisfy DoD 8140/IAT requirement)
- Certified Kubernetes Administrator (CKA), Certified Kubernetes Security Specialist (CKS), or similar Kubernetes certification
- AWS, Azure, or Red Hat OpenShift associate/professional-level certification
- Terraform Associate, RHCSA/RHCE, or comparable automation/platform certification
- CASP+ CE, CISSP, or equivalent advanced cybersecurity certification
Benefits
- Health, dental, and vision insurance
- Paid time off and holidays
- Retirement benefits (including 401(k) matching)
- Educational reimbursement
- Parental leave
- Employee stock purchase plan
- Tax-saving options
- Disability and life insurance
- Pet insurance
Pay
$175,000 – $220,000 (good‑faith estimate; actual compensation may vary based on job responsibilities, education, experience, skills, internal equity, market data, applicable collective
for prose. Do NOT repeat job title as heading. Do NOT put Job ID/requisition numbers as headings. Remove boilerplate, navigation, legal, EEO, etc. Include only sections with real specific content. We have content: location, relocation assistance, remote/telework, clearance type, shift, travel required, description of duties (multiple subparts). Also "The successful candidate will:" bullet points (communication skills, resumes format). Then Basic Requirements list. Desired Requirements list. Desired Certifications list. Compensation Details (pay range). Benefits Overview list. Also note about posting duration etc (maybe not needed). Also "Original Posting" dates maybe not needed. Also "Amentum anticipates..." maybe not needed. Also EEO boilerplate to remove. We need to decide sections: About the role (maybe a brief summary). Responsibilities (description of duties). Requirements (basic requirements). Qualifications (maybe desired requirements? Or could combine). Skills (maybe desired certifications? Or skills list). Benefits (benefits overview). Pay (compensation details). Schedule (maybe shift, travel, etc). We need to include only sections with real specific content. We have location etc; maybe include in About the role? Could include location, clearance, shift, travel as part of About the role. We must not invent placeholder text. Must preserve all substantive info. Let's extract: - Position Title: Senior DevSecOps Engineer (not used as heading) - Location: Schriever Space Force Base, Colorado Springs, CO, Redstone Arsenal, Huntsville, AL, or Fort Belvoir, VA - Relocation Assistance: None available at this time - Remote/Telework: NO - Not available for this position - Clearance Type: DoW Secret - Shift: Day shift - Travel Required: Up to 10% of the time - Description of Duties: long paragraph plus sub-bullets (though they are not bullet list but sentences). We can treat as prose or list. The instruction: Use
- for any list of duties/requirements/benefits. The description includes multiple duty areas each starting with bold headings (Cloud-Native Platform Engineering, etc). Could treat each as list item. We need to preserve all substantive info; we can convert each duty area into
- .
- The successful candidate will: Have strong written and verbal communication skills, including the ability to collaborate across technical teams and brief leadership or Government stakeholders. Resumes, in month and year format, must be submitted with application in order to be considered for the position. The selected candidate may be assigned as an employee for one of our teammate companies.
That's more like requirements? Could be part of Requirements or Qualifications.
- Basic Requirements: list of must-haves.
- Desired Requirements: list.
- Desired Certifications: list.
- Compensation Details: $175,000 – $220,000 plus note.
- Benefits Overview: list of benefits.
We need to avoid boilerplate like "This position will be posted for a minimum of 3 days..." etc. Also remove EEO.
Now decide sections:
About the role: could include location, clearance, shift, travel, relocation, remote.
Responsibilities: description of duties (list).
Requirements: basic requirements (must-haves). Could also include "The successful candidate will" communication skills and resume format.
Qualifications: desired requirements (education, experience). Could also include desired certifications as Skills? Or separate.
Skills: maybe desired certifications? Or combine desired requirements and certifications under Skills? But we need to follow instruction: Use headings for sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We can decide to use only those that have content.
We have content for About the role (location etc). Responsibilities (duties). Requirements (basic requirements). Qualifications (desired requirements). Skills (desired certifications). Benefits (benefits overview). Pay (compensation). Schedule (shift, travel). That seems reasonable.
We must not create sections with filler like "commensurate with experience". We have actual specifics.
Now produce HTML.
Structure:
About the role
Location: Schriever Space Force Base, Colorado Springs, CO; Redstone Arsenal, Huntsville, AL; or Fort Belvoir, VA. Relocation Assistance: None available at this time. Remote/Telework: Not available. Clearance Type: DoW Secret. Shift: Day shift. Travel Required: Up to 10% of the time.
Responsibilities
- Cloud-Native Platform Engineering: Design, implement, and maintain scalable cloud and container platform solutions supporting NGE mission applications across environments including Azure Kubernetes Service (AKS), AWS Elastic Container Service (ECS), and Red Hat OpenShift Container Platform (OCP).
- DevSecOps Pipeline Automation: Engineer, enhance, and sustain CI/CD pipelines that integrate automated build, test, security scanning, release, and deployment workflows to accelerate software delivery while maintaining compliance and operational stability.
- Infrastructure as Code (IaC) & Configuration Automation: Develop and maintain automated infrastructure provisioning and configuration management solutions using tools such as Terraform, Helm, Ansible, and Bash, enabling repeatable, version-controlled deployments across development, test, and production environments.
- Container Security & Compliance: Implement container hardening, image assurance, secrets management, and runtime security controls aligned to DoD, MDA, RMF, DISA STIG, and Zero Trust requirements. Support continuous monitoring and compliance validation for containerized workloads and platform services.
- Hybrid Cloud Integration: Assess existing application and infrastructure architectures and develop migration and integration strategies for cloud-enabled and containerized environments. Ensure interoperability between legacy services, cloud-native platforms, and enterprise mission systems.
- Platform Architecture & Service Enablement: Support the design and evolution of resilient platform services that host modern applications and shared capabilities across IaaS and PaaS ecosystems, including orchestration, service networking, observability, policy enforcement, and secure access patterns.
- Cross-Functional Engineering Collaboration: Partner with software developers, systems engineers, network engineers, cybersecurity teams, database administrators, and Government stakeholders to ensure cohesive integration of infrastructure, applications, and security controls across the NGE ecosystem.
- Operational Sustainment & Troubleshooting: Monitor, troubleshoot, and resolve complex platform, integration, and deployment issues across Kubernetes and cloud-hosted environments. Improve operational resilience through automation, root cause analysis, and proactive engineering improvements.
- Database & Application Hosting Support: Support deployment and sustainment of cloud-hosted and containerized application data services, including technologies such as PostgreSQL, Cassandra, and MySQL, ensuring secure configuration, availability, and performance alignment with mission requirements.
- Documentation & Engineering Governance: Develop and maintain technical documentation including implementation plans, pipeline designs, architecture diagrams, deployment procedures, standard operating procedures, and configuration baselines to support lifecycle management and operational continuity.
- Technology Evaluation & Continuous Improvement: Evaluate emerging DevSecOps, platform engineering, and cloud technologies to improve automation, scalability, security, cost efficiency, and mission responsiveness across the NGE environment.
- Stakeholder Reporting & Technical Communication: Provide technical status, risk identification, engineering recommendations, and platform capability assessments to program leadership and Government stakeholders. Translate complex platform and automation topics into mission-relevant impacts and decisions.
Requirements
- Must have 12 or more years of general (full-time) work experience (may be reduced with completion of advanced education).
- Must have 6 or more years of directly related progressive experience in DevSecOps, platform engineering, systems integration, cloud engineering, or related infrastructure engineering roles.
- Must have 1 or more years of experience working in a management or leadership role.
- Must have demonstrated experience designing, deploying, and sustaining Kubernetes-based or other containerized platforms in enterprise environments.
- Must have demonstrated experience with one or more cloud platforms such as AWS, Azure, or Red Hat OpenShift.
- Must have experience building and maintaining CI/CD pipelines, automation workflows, and secure software delivery processes.
- Must have experience with Infrastructure-as-Code and configuration automation tools such as Terraform, Helm, Ansible, and scripting languages such as Bash.
- Must have a strong understanding of containerization technologies such as Docker and Kubernetes, including deployment, orchestration, scaling, and lifecycle management.
- Must be familiar with security controls and compliance requirements applicable to cloud and platform engineering environments, including RMF, DISA STIGs, Zero Trust, and secure hardening practices.
- Must be able to analyze complex technical problems spanning multiple organizations, systems, and engineering disciplines and develop practical, scalable solutions.
- Must have a baseline DoD 8140/IAT certification, such as Security+ CE.
- Must have an active DoW Secret Security Clearance.
- The successful candidate will have strong written and verbal communication skills, including the ability to collaborate across technical teams and brief leadership or Government stakeholders.
- Resumes must be submitted in month and year format with application to be considered for the position.
- The selected candidate may be assigned as an employee for one of our teammate companies.
Qualifications
- Have a Bachelor’s degree, or higher, in Computer Science, Information Technology, Engineering, or a related technical field.
- Have experience supporting the Missile Defense Agency (MDA) or other DoD enterprise modernization programs.
- Have experience with Coder Platform or comparable cloud development workspace platforms.
- Have experience implementing platform observability, logging, monitoring, and alerting capabilities in cloud-native environments.
- Be familiar with continuous Authority to Operate (cATO) concepts and security automation within DevSecOps pipelines.
- Have experience supporting hybrid cloud migration, application modernization, and legacy system integration efforts.
- Have experience working in Agile, Scrum, or other iterative delivery models in mission or enterprise IT environments.
- Have experience evaluating and recommending technologies based on cost, mission impact, technical risk, and operational sustainment considerations.
- Have experience with secure database deployment and sustainment in cloud-hosted or containerized environments.
Skills
- Security+ CE (required baseline if used to satisfy DoD 8140/IAT requirement)
- Certified Kubernetes Administrator (CKA), Certified Kubernetes Security Specialist (CKS), or similar Kubernetes certification
- AWS, Azure, or Red Hat OpenShift associate/professional-level certification
- Terraform Associate, RHCSA/RHCE, or comparable automation/platform certification
- CASP+ CE, CISSP, or equivalent advanced cybersecurity certification
Benefits
- Health, dental, and vision insurance
- Paid time off and holidays
- Retirement benefits (including 401(k) matching)
- Educational reimbursement
- Parental leave
- Employee stock purchase plan
- Tax-saving options
- Disability and life insurance
- Pet insurance
Pay
$175,000 – $220,000 (good‑faith estimate; actual compensation may vary based on job responsibilities, education, experience, skills, internal equity, market data, applicable collective