Bachelor's degree in Computer Science, Cybersecurity, IT, Software Engineering, or related field.
DoD 8140/8570 IAT Level II certification (e.g., Security+ CE or equivalent).
Senior-level expertise in key tasks and technology assignments; capable of leading teams.
Deep understanding of Agile and DevSecOps methodologies, particularly with Jenkins and GitLab.
Proven ability to build and maintain CI/CD pipelines for large enterprises.
Experience with Infrastructure as Code (IaC) and Configuration as Code (CaC) using Packer, Terraform, and Ansible.
Familiarity with cloud systems (AWS, Google Cloud, Azure) and scripting languages (Bash, Python).
Responsibilities
Build and maintain CI/CD pipelines for a large enterprise environment.
Develop, test, and maintain containerized applications using version control and build tools.
Automate security control implementation and evidence collection for compliance.
Integrate and tune security tooling within CI/CD pipelines.
Support security assessments and control validation for embedded value streams.
Collaborate with cross-functional teams including software developers and government stakeholders.
Architect logging and monitoring solutions for continuous oversight.
Benefits
Opportunity to work on cutting-edge cybersecurity programs.
Collaborative environment with cross-functional teams.
Focus on security-first practices and Zero Trust principles.
Engagement in continuous learning and professional development.
Support for advanced certifications and technical growth.
Full Job Description
4552 DevSecOps Engineer 4552 | TS/SCI
Job Description:
OVERVIEW:
We are seeking a DevSecOps Engineer to support one of our cybersecurity programs in our San Antonio office. In this position, you will develop and manage the CI/CD pipelines of mission applications across value streams. Considered a strong generalist on CI/CD and security requirements, the role automates security control implementation and evidence collection and advances inheritance and automation aligned with the Government's Cyber Assessment Roadmap to sustain IATT, ATO, and cATO readiness.
This position establishes the automation standard for secure software delivery, ensuring security is built into pipelines, and control evidence is generated continuously.
GENERAL DUTIES:
Build and maintain CI/CD pipelines (e.g., GitLab CI, Jenkins) for an enterprise consisting of many applications.
Develop, test, and maintain containerized applications; work with source version control and build/release tooling.
Develop Infrastructure as Code (IaC) and Configuration as Code (CaC) using Packer, Terraform, and Ansible.
Automate security control implementation, validation, and evidence collection supporting RMF, ATO, and cATO.
Integrate and tune pipeline security tooling: SAST, DAST, SCA, container scanning, secrets detection, and policy gates.
Support security-relevant changes (SRCs), Security Impact Assessments (SIAs), and control validation for embedded value streams.
Support application/container vulnerability management, whitelisting decisions, and CTF/pipeline compliance so changes do not invalidate the ATO.
Collaborate with ISSEs, software developers, Value Stream engineers, COT, CPT, and Government stakeholders across sprint cadences.
Architect logging, monitoring, and telemetry to support continuous monitoring.
Maintain a strong security-first mindset and support Zero Trust and secure software supply chain practices.
Maintain and validate A&A control evidence in eMASS (control implementation, SIAs, SRCs, POA&Ms) supporting continuous monitoring and cATO readiness.
Develop automated security policies in CI/CD (e.g., GitLab Policies) to flag End-of-Life images, remediate pipeline vulnerabilities, prevent unauthorized deployments, and quarantine compromised artifacts.
REQUIRED QUALIFICATIONS:
Bachelor's degree in Computer Science, Cybersecurity, IT, Software Engineering, or related field.
Certification: DoD 8140/8570 IAT Level II e.g., Security+ CE or equivalent.
Senior level comprehensive knowledge across key tasks and high-impact assignments; plans and leads major technology assignments; functions as a technical expert across the team; may lead others.
Deep understanding of Agile and DevSecOps methodologies; DevSecOps implementation using Jenkins, GitLab, or similar.
Skillset to build and maintain CI/CD pipelines for a large enterprise (hundreds of applications).
Experience developing IaC/CaC with Packer, Terraform, and Ansible; development experience with Kubernetes, Docker, and Helm.
Experience with cloud systems and architectures (AWS, Google Cloud, or Azure); Linux and scripting (Bash, Python).
Working knowledge of source version control, build/release tools, and CI/CD; strong security-first mindset.
Minimum years of experience - 4 years of relevant experience
DESIRED QUALIFICATIONS:
Advanced degree in a related technical field.
Certification: CKS, CKA, AWS certifications, CCSP, or GitLab certifications.
Experience and Knowledge:
Experience developing software with Java/Spring, Python, JavaScript/node.js, or Angular; microservice architectures (REST, JMS, AMQP).
Experience with Istio; experience supporting Government software factory environments.
Experience supporting Continuous Authority to Operate (cATO).
Experience with secure software supply chain (SBOM, artifact signing).
Experience supporting IL4, IL5, or IL6 cloud environments; COT, CPT, or Security Control Assessors.
Experience with GitLab security policies, Twistlock, Anchore, Defect Dojo, container signing (e.g., cosign/sigstore), and End-of-Life image detection.
CLEARANCE:
Active TS/SCI clearance minimum required
Job Details
City : San Antonio
State : Texas
About Affinity
Affinity’s patented technology structures and analyzes millions of data points across emails, calendars, and third-party sources to offer users the tools they need to automatically manage their most valuable relationships, prioritize important connections, and discover untapped opportunities. Affinity uses artificial intelligence to analyze relationship strength and illuminate the best paths to warm introductions. The platform also offers a holistic view of users’ networks in a centralized, automatically updated database without any manual upkeep. Founded in 2014, Affinity is headquartered in San Francisco, California.
Affinity has raised $120M to date and is backed by leading investors including Menlo Ventures, Advance Venture Partners, 8VC and MassMutual Ventures.
It has over 2,700 customers in 70 countries, including venture capital firms such as Bain Capital Ventures and Kleiner Perkins, private equity firms such as SoftBank Group, investment bankers such as Woodside Capital Partners, financial services firms such as Fidelity Investments, real estate companies such as Tishman Speyer, insurers such as American Family Insurance and enterprises such as Nike, Qualcomm and Twilio.
Affinity has been named in Fortune Magazine's Best Workplaces, Inc. Magazine's Best Workplaces and editor's number one pick, the Data Breakthrough Award, BIG Innovation Award and others.
