DevSecOps Engineer (RMF/DoD)

Location: Hybrid, based in San Diego, California, with at least 4 days per week in the office and nearby government facilities; up to 10% travel required.

Salary: $114,000–$184,000 per year, excluding bonuses, commissions, tips, and benefits.

Company

hirify.global delivers mission-critical software and systems solutions, automation, digital engineering, and advanced capabilities for U.S. government defense, weapon, and combat systems.

What you will do

• Design and implement secure, high-performance architectures for autonomous systems, AI-driven platforms, edge-computing devices, and Navy mission systems.
• Embed SAST, DAST, IAST, SRM, STIG compliance, vulnerability remediation, SBOM generation, and container scanning into CI/CD pipelines.
• Lead RMF activities across categorization, control selection, implementation, assessment, authorization, and continuous monitoring, including transition toward cATO.
• Secure multi-tenant IL5/IL6 environments using Type-1 hypervisors, Kubernetes, containers, Zero Trust, and ICAM solutions.
• Develop RMF artifacts and authorization packages, including SSPs, SARs, SAPs, POA&Ms, inventories, architecture diagrams, and monitoring documentation.
• Serve as an ISSO and coordinate with Navy Authorizing Officials, SCAs, ISSMs, ISSOs, program managers, developers, engineers, and customers on security compliance and system operations.

Requirements

• Bachelor’s degree in Cybersecurity, Information Assurance, Computer Science, Information Technology, or equivalent full-time professional experience.
• DoD 8570/8140 IAM Level I qualification through an approved certification such as Security+, SSCP, or GSEC, or a qualifying degree recognized by the DoD 8140 educational matrix.
• 5+ years of cybersecurity or systems engineering experience within the Defense Industrial Base, including mastery of the Risk Management Framework.
• Experience with RMF artifacts, ATO/IATO/IATT activities, continuous monitoring, vulnerability assessments, STIG checklists, POA&M management, ACAS/Nessus, SCAP, and eMASS.
• Experience developing access-control policies, configuring authentication and PKI, remediating vulnerabilities, maintaining golden images, and documenting systems and networks.
• Ability to travel up to 10% of the time as needed.
• Must be able to obtain and maintain an active Secret U.S. Security Clearance.

Nice to have

• Experience with Department of the Navy RAISE 2.0, cATO/eATO, Overmatch Software Armory, Navy DevSecOps platforms, ACS, or CANES architectures.
• Expertise securing OCI-compliant Docker containers and Kubernetes clusters, including network policies, Istio service meshes, and runtime security.
• Experience with ESXi, KVM, VDI, hardware roots of trust, and secure hypervisor configuration.
• Experience with Terraform, Ansible, CloudFormation, PowerShell, Chef, Salt, Puppet, or other configuration automation tools.
• DoD 8570/8140 IAM Level III certification such as CISSP or CISM.
• Experience identifying hardware and software purchases for different use cases.

Culture & Benefits

• Entrepreneurial culture with collaborative engineering work supporting defense-industry customers.
• Competitive benefits package, PTO, paid holidays, and 401(k) with immediate vesting and matching.
• Optional 9/80 schedule with the second and fourth Friday off each month.
• Tuition assistance, professional development resources, and pre-tax commuter benefits.
• Regular technical, recognition, and social events, including catered lunches.