DevSecOps Engineer at Data Machines

Job description

Location: Reston, VA Experience Level: Mid to Senior Level Clearance: Active Secret Clearance Required Salary Range: 166,000 (Based on skills and experience) At Data Machines , we leverage data analytics, DevSecOps, machine intelligence, and data science to engineer innovative solutions for our Federal Government, Department of Defense, and commercial customers. Our teams solve complex, mission-critical challenges using modern technology and secure engineering practices. We are seeking an experienced DevSecOps Engineer to secure and improve software delivery while helping operate a scalable compute environment supporting software development, simulation, and mission-focused applications. This hands-on engineering role will embed security, quality, compliance, and software-supply-chain controls throughout the software-development lifecycle. You will work across Azure DevOps Server, Nexus, SonarQube, multi-cluster Kubernetes/K3s infrastructure, virtual machines, bare-metal systems, artifact controls, monitoring, and secure-release processes. The ideal candidate has a strong DevSecOps or platform-engineering background and is comfortable working across software delivery, infrastructure, security, and user support in highly regulated environments. This position will be performed full-time on-site at a secure location in the Reston, VA area . Occasional after-hours or weekend maintenance and emergency response may be required. Minimum Qualifications Active Secret security clearance. U.S. citizenship required. 5+ years of experience in DevOps, DevSecOps, platform engineering, software delivery, systems engineering, or a closely related technical role. Hands-on experience with Azure DevOps pipelines, YAML, build and release workflows, repositories, artifacts, permissions, or agent-based builds. Experience implementing security, quality, or compliance controls within CI/CD workflows. Experience with secure software-delivery practices, including SAST, SCA, secrets handling, code-quality gates, artifact controls, or container scanning. Experience troubleshooting CI/CD failures, build issues, deployment problems, permissions issues, or dependency-related errors. Experience with Kubernetes, K3s, containers, Helm, or similar deployment technologies. Experience providing face-to-face Tier 1 and Tier 2 user support in Linux or Unix environments. Current DoD 8570/8140 IAT Level II baseline certification, such as Security+ CE, CCNA Security, or CySA+. Experience with ServiceNow, Remedy, or a similar ticketing platform. Experience with FreeIPA and supporting identity, DNS, DHCP, Group Policy, or distributed-file services. Experience scripting or automating with PowerShell, Bash, Python, or similar languages. Ability to write clear technical documentation, runbooks, onboarding guides, and troubleshooting procedures. Ability to work full-time on-site at a secure location in the Reston, VA area in regulated, secure, and compliance-bounded environments. Preferred Qualifications Experience administering Azure DevOps Server. Experience integrating or administering Nexus, SonarQube, or similar artifact and code-quality platforms. Experience with SBOM generation, SCA, container scanning, artifact signing, provenance, or software-supply-chain security. Experience with policy as code, OPA/Gatekeeper, Kubernetes admission controls, or secure workload policies. Experience with Infrastructure as Code or Configuration as Code using Terraform, Ansible, Bicep, CloudFormation, or similar tools. Experience with Prometheus, Grafana, Loki, or similar observability platforms. Experience supporting defense contracting or government programs and working within CMMC, NIST SP 800-171, RMF, STIG, or other compliance-driven environments. Experience providing user support in a dynamic, innovation-driven environment with changing requirements. Demonstrated ability to implement scripted automation that reduces recurring support work. Experience coordinating with security professionals to define, develop, and review user-management processes and procedures. Key Responsibilities Design, implement, and improve secure CI/CD patterns in Azure DevOps, including reusable YAML templates, quality gates, artifact controls, and release safeguards. Support secure release workflows across development, test, integration, staging, and production environments. Support continuous deployment, auto-scaling, resource monitoring, security monitoring, and reliable operation of application services. Onboard software, hardware, and security controls using repeatable DevSecOps practices and provide direct technical support to partners and users. Manage platform systems, including Kubernetes clusters, dedicated virtual machines, and bare-metal instances. Troubleshoot pipeline failures, permissions issues, dependency problems, scan failures, and release blockers. Integrate SAST, SCA, dependency scanning, secrets scanning, code-quality gates, container scanning, and artifact validation into build and release workflows. Implement repository, branching, merging, configuration-management, automated-build, and automated-testing practices that preserve integrity across environments. Support Nexus, SonarQube, Azure DevOps artifacts, and related code-quality and artifact-management platforms. Partner with cybersecurity teams to align CI/CD controls with SSP, RMF, NIST, CMMC, STIG, Zero Trust, audit, and program requirements. Partner with platform engineering on Kubernetes/K3s deployment standards covering namespaces, RBAC, service accounts, Helm, ingress, TLS, storage, quotas, and workload security. Create documentation, examples, runbooks, and onboarding materials for secure pipeline and deployment workflows. Track pipeline health, scan outcomes, release blockers, recurring developer pain points, and control gaps, and convert findings into automation and improved guardrails. Support occasional after-hours or weekend maintenance and emergency response when required. This position is contingent upon contract award. APPLY NOW Culture: Smart People, No Red Tape Data Machines does not discriminate in employment, services, and activities on the basis of race, color, religion, national origin, sex, gender identity, sexual orientation, pregnancy, childbirth or related medical conditions, age, marital status, veteran status, disability, or any other basis prohibited by law. Data Machines invites any applicant to review the Data Machines’ written Affirmative Action Plan, available for inspection during the hiring process. Our salary ranges are market-driven and set to allow for flexibility. Individual pay will be competitive based on a candidate’s unique set of knowledge, skills, and geographic diversity, with earnings potential commensurate with experience. Apply Now <div class="elementor-icon elementor

Requirements

Must-haves

Location: Reston, VA
Experience Level: Mid to Senior Level
Clearance: Active Secret Clearance Required
This position will be performed full-time on-site at a secure location in the Reston, VA area . Occasional after-hours or weekend maintenance and emergency response may be required.
Active Secret security clearance.
U.S. citizenship required.
5+ years of experience in DevOps, DevSecOps, platform engineering, software delivery, systems engineering, or a closely related technical role.
Hands-on experience with Azure DevOps pipelines, YAML, build and release workflows, repositories, artifacts, permissions, or agent-based builds.
Experience implementing security, quality, or compliance controls within CI/CD workflows.
Experience with secure software-delivery practices, including SAST, SCA, secrets handling, code-quality gates, artifact controls, or container scanning.
Experience troubleshooting CI/CD failures, build issues, deployment problems, permissions issues, or dependency-related errors.
Experience with Kubernetes, K3s, containers, Helm, or similar deployment technologies.
Experience providing face-to-face Tier 1 and Tier 2 user support in Linux or Unix environments.
Current DoD 8570/8140 IAT Level II baseline certification, such as Security+ CE, CCNA Security, or CySA+.

Nice-to-haves

Experience administering Azure DevOps Server.
Experience integrating or administering Nexus, SonarQube, or similar artifact and code-quality platforms.
Experience with SBOM generation, SCA, container scanning, artifact signing, provenance, or software-supply-chain security.
Experience with policy as code, OPA/Gatekeeper, Kubernetes admission controls, or secure workload policies.
Experience with Infrastructure as Code or Configuration as Code using Terraform, Ansible, Bicep, CloudFormation, or similar tools.
Experience with Prometheus, Grafana, Loki, or similar observability platforms.
Experience supporting defense contracting or government programs and working within CMMC, NIST SP 800-171, RMF, STIG, or other compliance-driven environments.
Experience providing user support in a dynamic, innovation-driven environment with changing requirements.
Demonstrated ability to implement scripted automation that reduces recurring support work.
Experience coordinating with security professionals to define, develop, and review user-management processes and procedures.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

azurekubernetesci/cdpython

Platform: careers-html
Effort: medium