DevSecOps Engineer - JobID-0336Department: Engineering
Employment Type: Full Time
Location: San Diego, CA
Compensation: $114,000 - $184,000 / year
DescriptionAbout The Role:This DevSecOps Engineer will lead and support cybersecurity accreditation activities for mission-critical Department of War systems, including Authority to Operate (ATO) efforts, Risk Management Framework (RMF) implementation, vulnerability management, continuous monitoring through the Navy and DoW's DevSecOps deployment pipelines, and security engineering activities supporting U.S. Navy programs. Duties will also include providing and maintaining documentation for processes and procedures, while also providing support to internal engineers or customers on-site.
Clearance & Location Requirements:- All applicants must be able to obtain/maintain an active Secret U.S. Security Clearance.
- This is an on-site position. Requiring at least 4 days in office, based out of our San Diego, CA location and nearby government facilities.
Key ResponsibilitiesWhat You Will Do: - Help design and implement secure, high-performance architectures for autonomous systems, AI-driven platforms, and edge-computing devices.
- Embed automated security gates (SAST, DAST, IAST, SRM) into CI/CD pipelines to ensure that security is "code-driven" rather than a manual bottleneck.
- Lead the transition from static RMF cycles to Continuous Authority to Operate (cATO) by automating control verification and continuous monitoring.
- Architect secure multi-tenant environments using virtualized (Type-1 Hypervisors) and containerized orchestration (Kubernetes) tailored for IL5/IL6 mission sets.
- Engineer Identity, Credential, and Access Management (ICAM) solutions that enforce Zero Trust principles across distributed hardware and software nodes.
- Lead RMF efforts across all six RMF steps including Categorization, Control Selection, Control Implementation, Assessment, Authorization, and Continuous Monitoring.
- Develop and maintain RMF artifacts including SSPs, SARs, SAPs, POA&Ms, inventories, architecture diagrams, and continuous monitoring documentation.
- Coordinate directly with U.S. Navy Authorizing Officials (AOs), Security Control Assessors (SCAs), ISSMs, ISSOs, and Program Managers. Performing regular server updates, patch management, and software installations.
- Manage cybersecurity authorization packages and support (I)ATO & (I)ATT activities.
- As needed, performing ACAS Scans on various devices across multiple systems
- Collect, review, and submit various STIG checklists for RMF processes
- Develop and maintain access control policies for various organization assets
- Remediate Vulnerabilities and documenting POAMs as required.
- Work with developers and engineers to implement, maintain, and review security processes to maintain compliance and ensure user permissions are accordingly
- Help develop and maintain various golden images in support of business area activities to include operating system images and virtual machines.
- Create and maintain detailed documentation of systems and networks for usage by both technical and non-technical stake holders
- Serve as the appointed Information System Security Officer (ISSO) for product-level Authorizations to Operate (ATOs) and DCSA authorized information systems, supporting security authorization activities and ensuring compliance with applicable cybersecurity policies, standards, and regulatory requirements.
- Perform continuous monitoring (ConMon) activities as assigned by the Information System Security Manager (ISSM) and in accordance with established Risk Management Framework (RMF) requirements and the approved System Security Plan (SSP), including vulnerability assessments, security control assessments, STIG compliance, Plan of Action and Milestones (POA&M) management, and ongoing evaluation of the system security posture to maintain authorization compliance.
- Coordinate with the ISSM on all information system security matters and serve as the on-site representative for DSCA-related activities.
Skills, Knowledge & ExpertiseWho You Are (Required): - Bachelor's Degree in in Cyber Security, Information Assurance, Computer Science, Information Technology or equivalent full-time professional experience
- DoD 8570/8140 IAM Level III (CISSP, CISM) Certified
- 5+ years experience in Cybersecurity or Systems Engineering within the Defense Industrial Base (DIB), with a mastery of the Risk Management Framework (RMF).
- Ability to travel up to 10% of the time as needed
What Makes You Stand Out:- 5+ years in Cybersecurity or Systems Engineering within the Defense Industrial Base (DIB), with a mastery of RMF; this includes:
- Experience navigating the Department of the Navy RAISE 2.0 process to achieve continuous cyber readiness and inherit platform Authority to Operate (cATO/eATO) for containerized mission applications.
- Familiarity with the Overmatch Software Armory (or similar Navy DevSecOps Platforms / RAISE Platforms of Choice) for pipeline execution, automated security gating, SBOM generation, and container scanning.
- Familiarity with deploying, hardening, or integrating software services within Navy tactical environments, specifically ACS and CANES architectures.
- Proficient in CI/CD pipelines, including automated STIG compliance, SAST/DAST, vulnerability remediation, and container hardening to meet Navy Cyber Ready directives.
- Expert-level knowledge of securing OCI-compliant containers (Docker) and Kubernetes (K8s) clusters, including network policies, service meshes (Istio), and runtime security.
- Significant experience with Server Virtualization (ESXi, KVM) and Desktop Virtualization (VDI), including hardware-root-of-trust and secure hypervisor configuration.
- Firm grasp of Infrastructure as Code (IaC) deployments of secure, reproducible environments using Terraform, Ansible, or CloudFormation.
- Experience with automated security assessment tools (ACAS/Nessus, SCAP) and the technical integration of security data into eMASS.
- Experience with configuring multiple forms of authentication to include PKI concepts.
- Experience with having to identify hardware and/or software for purchase to meet various use-cases.
- Experience with Ansible, PowerShell, Chef, Salt, Puppet, or any other configuration automation software.
If you see yourself reflected in this role and are excited about the impact you could make, we encourage you to apply! If you know someone who may be a great fit, please feel free to share this opportunity with your network.Pay Range*: $114,000 - $184,000
*Pursuant to California Senate Bill 1162, IDT is required to disclose the "pay scale" or "pay range" associated with a job posting. Notably, however, this amount may not be reflective of actual compensation that may be earned as pay is dependent on a candidate's experience, skills, and education. The posted range does not include bonuses, commissions, tips, or other benefits. Click here for additional information about Senate Bill 1162. IDT is often looking to place multiple candidates at various levels. Therefore, more than one pay range has been included, commensurate with experience.
Job Benefits 
