DevSecOps Engineer

DevSecOps Engineer INflow Federal Arlington, VA Job Details 2 hours ago Qualifications Infrastructure as Code (IaC) IT system monitoring Cloud security management Application deployment Scalable systems Information security compliance Driver's License Cloud infrastructure implementation Cloud development DoD 8570 Scalability Vulnerability management Amazon CloudWatch Technical troubleshooting support Cloud monitoring RMF IT security monitoring Full Job Description About INflow Federal - founded in 2013, INflow Federal is a mission-driven small business delivering cutting-edge solutions to the Department of War (DoW) and Joint Force operations across 20+ states. Our strength comes from our people - especially the Veterans who make up over 50% of our workforce. Through our Veteran Outreach Program and employee-first culture, we invest deeply in professional growth, well-being, and innovation. Known for our agility, transparency, and integrity, INflow combines real-world experience with emerging technologies like AI/ML to help our customers lead in a rapidly evolving defense landscape. We empower both our employees and mission partners to stay ahead - driving smarter, faster, and more secure outcomes. INflow Federal is seeking a DevSecOps Engineer to lead continuous integration, delivery, and security automation for an enterprise-level case management solution supporting Department of Defense mission partners. The role focuses on establishing and maintaining secure, scalable CI/CD pipelines, containerized environments, and infrastructure as code (IaC) within AWS GovCloud Impact Level (IL) 2, 4, and 5 environments. The DevSecOps Engineer will collaborate across engineering, cybersecurity, and development teams to ensure the system's architecture adheres to federal cybersecurity mandates, integrates with continuous monitoring tools, and achieves full lifecycle automation. This is a fully remote position. Here, your work is more than a job - it's a journey in innovation. With opportunities to work on high-impact projects, access to the latest technologies, and a culture that thrives on creativity and collaboration, INflow Federal is where your expertise can truly make a difference.

Specific Duties and Responsibilities:

Design, implement, and maintain CI/CD pipelines supporting build, test, and deployment automation for all environments Develop and manage containerized application deployments using Docker and Kubernetes within AWS GovCloud Implement Infrastructure as Code (IaC) using Terraform or CloudFormation to automate provisioning and configuration management Integrate automated security scans and compliance checks aligned with DoD Risk Management Framework (RMF) and

DISA STIG

baselines Support continuous monitoring and logging through AWS CloudWatch, GuardDuty, and third-party vulnerability management tools (e.g., Nessus, ACAS) Collaborate with development and cybersecurity teams to ensure secure code practices and adherence to Zero Trust architecture principles Develop and maintain DevSecOps plans, playbooks, and standard operating procedures that document secure build and deployment processes Lead performance tuning, scalability planning, and proactive incident response for CI/CD infrastructure Manage code repositories in AWS CodeCommit, ensuring secure branching, versioning, and release management Coordinate with system administrators to optimize network, storage, and compute resources supporting the CI/CD pipeline Participate in Agile ceremonies to plan, execute, and review DevSecOps sprint deliverables Support system authorization activities, including documentation for ATO compliance under DoDI 8510.01 (RMF)

Required Skills:

Strong knowledge of CI/CD tools such as Jenkins, GitLab CI, or AWS CodePipeline Proficiency with containerization and orchestration (Docker, Kubernetes, Helm) Experience with IaC tools such as Terraform or AWS CloudFormation Familiarity with Zero Trust, RMF, and

DISA STIG

compliance Hands-on experience with monitoring and alerting tools (CloudWatch, ELK Stack, Prometheus) Scripting proficiency in Python, Bash, or PowerShell Experience integrating static code analysis, dependency scanning, and vulnerability management into build pipelines Strong collaboration skills across multidisciplinary teams Ability to balance performance, scalability, and security in automated deployments Excellent troubleshooting, problem-solving, and analytical skills Effective communication skills for both technical and executive audiences Preferred certifications: AWS Certified DevOps Engineer - Professional, CompTIA Security+ CE (DoD 8570), Certified Kubernetes Administrator (CKA) or Docker Certified Associate (DCA)

Required Education and Experience:

Bachelor's degree in Computer Science, Information Technology, Engineering, or related field, or equivalent combination of education, technical training, or work/military experience Minimum 7 years of experience in DevSecOps, software automation, or cloud infrastructure engineering Demonstrated experience supporting secure cloud-based development environments within AWS GovCloud or DoD-accredited platforms Required Clearance Active DoD Secret clearance Other Notes Some travel may be required: Must have valid driver's license and transportation. This is subject to change at the direction of the customer. If accommodation is needed with your application or the interview process for applicants with disabilities, please contact Human Resources at 703-594-8601. Candidate must have the ability to lift up to 50 lbs. Must have willingness to perform duties not listed in the job description as required by INflow and our customer. Citizenship Requirements Please note that INflow Federal is a defense contractor. Pursuant to our government contracts, candidates must be US Citizens to be considered for employment. Equal Opportunity Employer Diversity and Inclusion INflow provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. This commitment applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, leaves of absence, compensation, and training. Job applicants and employees are evaluated solely on job-related qualifications and experience. We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.