Mid-Level DevSecOps Engineer

Location: Herndon, Virginia, United States; must work 40 hours per week onsite in a SCIF

Salary: $150,000–$250,000 USD per year

Company

hirify.global delivers technical and mission expertise for national security and defense challenges, supporting government customers with software, cybersecurity, and advanced technology capabilities.

What you will do

• Develop, test, maintain, and deploy software and automation tools that support cybersecurity workflows and reliable intelligence platforms.
• Implement and operate highly available Kubernetes and HashiCorp Nomad clusters across private cloud environments and multiple networks.
• Build Infrastructure-as-Code solutions and CI/CD pipelines using Terraform, Ansible, GitLab, and equivalent tools.
• Integrate security testing, static analysis, monitoring, and vulnerability management using tools such as ACAS, Trivy, GitLab SAST, Fortify, and SonarQube.
• Perform Linux system remediation, including OS patching, STIG implementation, software updates, and configuration management.
• Troubleshoot networks, infrastructure, automation pipelines, applications, and release products in collaboration with software, infrastructure, and cybersecurity professionals.

Requirements

• Active TS/SCI clearance and willingness and ability to pass a CI polygraph.
• Ability and willingness to work onsite 40 hours per week in a SCIF in Herndon, Virginia.
• At least 5 years of DevSecOps experience with a bachelor’s degree in Computer Science, Information Systems, or a related field, or a master’s degree with at least 3 years of relevant experience.
• At least 3 years of software development or software engineering experience, including professional experience with Python, Go, Java, C#, or a similar language.
• Strong experience with cloud-native applications, Kubernetes, Docker, Terraform or Ansible, CI/CD pipelines, Linux administration, networking, monitoring, and source control.
• Experience applying security practices in DevSecOps pipelines and working with Agile development teams.

Nice to have

• Security+ or comparable privileged-access certification.
• Experience with REST APIs, microservices, IaaS/PaaS services, and web-service development.
• Experience implementing Docker STIGs or CONMON cybersecurity remediation.
• RHCSA, LPIC 1/2, CKA, or Docker Certified Associate certification.

Culture & Benefits

• Medical, dental, and vision coverage with a company-contributed Health Savings Account.
• Annual paid time off, paid holidays, and paid parental leave.
• 401(k) plan with a company match.
• Training and development opportunities, award programs, and company-sponsored events.
• Benefits supporting financial wellness, retirement planning, family assistance, and work-life balance.