Senior DevSecOps & Software Engineer

ACT1 Federal is seeking a Senior DevSecOps & Software Engineer to deliver senior-level software engineering, DevSecOps, and cybersecurity-engineering support for DASN (DIB). The role focuses on developing, securing, deploying, and sustaining software applications and analytic tools used for defense industrial base assessment.

Role Responsibilities

• Provide software-engineering, DevSecOps, cybersecurity-engineering, platform-engineering, and implementation-support services for DASN (DIB) data-management and performance-assessment initiatives.
• Design, develop, test, document, maintain, and support deployments of software applications, analytic tools, data services, application programming interfaces, and related components.
• Develop applications using Python or comparable modern programming languages, frameworks, libraries, and practices aligned with Government-approved technical environments.
• Design and implement secure application architectures, including application programming interfaces, data integrations, authentication and authorization mechanisms, error handling, logging, monitoring, and performance-management capabilities.
• Containerize applications and services, create container-orchestration configurations, and support deployment through Government-approved development, testing, staging, and production environments.
• Develop, configure, maintain, document, and improve continuous integration and continuous delivery pipelines, source-code-management practices, artifact-management processes, automated testing, release-management workflows, and deployment automation as authorized by the Government.
• Produce infrastructure-as-code artifacts, configuration-management approaches, automation scripts, deployment manifests, and repeatable environment-configuration practices that support authorized application delivery and sustainment.
• Support integration with Department of War software factories, enterprise pipelines, cloud services, data platforms, source systems, and other Government-approved technical environments.
• Support deployment and sustainment of approved analytics, data-engineering, artificial-intelligence, machine-learning, reporting, and business-intelligence applications developed within or provided to DASN (DIB).
• Provide technical implementation, documentation, remediation, and coordination support for Government-led Risk Management Framework activities.
• Support implementation and documentation of security controls, secure configuration practices, vulnerability identification and remediation, Security Technical Implementation Guide assessment and remediation, continuous-monitoring activities, and authorization-package development.
• Prepare technical artifacts for Government security reviews and ongoing authorization and continuous-monitoring activities, including system descriptions, architecture diagrams, control-implementation narratives, configuration documentation, test evidence, remediation plans, and related work products.
• Conduct code reviews and participate in Government-approved secure-software-development activities, including automated testing, static and dynamic application-security testing, dependency analysis, container scanning, and configuration reviews.
• Create executive briefings, technical memoranda, implementation plans, architecture diagrams, decision packages, status reports, and risk summaries for senior technical and nontechnical stakeholders.
• Coordinate technical products and supporting information with DASN (DIB) directorates, ASN (RD&A) offices, DON acquisition organizations, DON enterprise service providers, Department of War stakeholders, cybersecurity organizations, and other Government-approved points of contact as directed by the Government.
• Support time-sensitive taskers, technical reviews, executive engagements, and approved working groups tied to software development, DevSecOps, cybersecurity, data, analytics, and industrial-base performance-assessment initiatives.

Required Qualifications

• Bachelor's degree from an accredited institution in data science, statistics, mathematics, economics, operations research, engineering, computer science, business analytics, or a related quantitative discipline.
• 10+ years of experience in software engineering, DevSecOps, platform engineering, cloud-native application development, cybersecurity engineering, or related technical fields.
• Demonstrated experience designing, developing, testing, containerizing, securing, and deploying production software applications.
• Demonstrated experience developing or maintaining continuous integration and continuous delivery pipelines, source-code-management processes, artifact-management workflows, automated testing, deployment automation, and release-management practices.
• Demonstrated experience with Python or a comparable modern programming language.
• Demonstrated experience with container technologies, container orchestration, infrastructure as code, configuration management, and cloud-native or enterprise application deployment and automation.
• Demonstrated experience developing, integrating, securing, or sustaining application programming interfaces, data integrations, and enterprise application services.
• Demonstrated experience supporting Risk Management Framework technical implementation, security-control implementation, security documentation, vulnerability management, Security Technical Implementation Guide assessment and remediation, or authorization-package development.
• Demonstrated ability to communicate technical risks, implementation status, security findings, architecture decisions, and delivery tradeoffs to senior technical and nontechnical stakeholders.
• At least one relevant cybersecurity, cloud-security, DevSecOps, container-security, software-engineering, or Department of War workforce-qualification certification.
• The position may require support outside normal business hours to meet time-sensitive transaction, interagency, executive, or industrial-base requirements.
• Current Top Secret and SCI eligibility required.

Technologies

• Python
• Container technologies
• Container orchestration
• Infrastructure as code
• Configuration management
• Artificial-intelligence
• Machine-learning
• Application programming interfaces
• Static and dynamic application-security testing
• Dependency analysis
• Container scanning

Location, Schedule, and Work Details

• Location: Pentagon, Arlington, Virginia (Onsite)
• Schedule: Full Time
• Shift: Day
• Remote Type: In-Office
• Travel Required: May require occasional domestic travel
• Category: Funded
• Clearance Required: Current Top Secret and SCI eligibility

Compensation

$170,000 - $200,000 per year.

Benefits

• Medical/Dental/Vision Insurance
• ACT1 Employee Stock Ownership Plan (ESOP)
• Company Paid Life and AD&D Insurance
• Company Paid Short-Term Disability
• Voluntary Long-Term Disability
• Flexible Spending Accounts (FSA)
• Health Savings Account (HSA)
• 401K with employer match
• Paid Time Off
• Paid Holidays
• Parental Leave
• Military Leave
• Education, Training & Professional Development
• Voluntary Accidental Injury/Critical Illness/Hospital Care
• Voluntary Pet Insurance, Legal Resources, and Identity Protection

About ACT1 Federal

• ACT1 Federal LLC is a 100% employee-owned company.
• Served the Department of War (DoW) for nearly thirty years.
• Core missions include weapon systems engineering, logistics, space domain expertise, global defense and security, business and financial management for security assistance and major defense articles, as well as military training and arctic security.