.png?1722368836)
DevSecOps Lead
540 is seeking an experienced DevSecOps Lead to oversee and implement secure, scalable and automated solutions across complex enterprise environments. The ideal candidate brings a well-rounded skill set spanning Configuration Management, Risk Management Framework (RMF), Enterprise Architecture, and Network Engineering, ensuring secure and efficient integration of development, security, and operations practices.
This is a DoD project that supports the Defense Acquisition community in making authoritative and trusted data available for analysis, oversight, insight, and decision-making over a large portfolio of acquisition programs. The team manages a central platform that integrates and shares acquisition data through modern APIs, with front- and back-end tools supporting user interaction and reporting. This single point of access is architected on top of a governed data framework to ensure consistency spanning upstream data providers and downstream data consumers. The platform has officially supplanted its predecessor (having achieved Initial Operating Capability) and is transitioning to Full Operating Capability, requiring an efficient and integrated contractor team to maintain, enhance, sustain, and test the system using Agile and DevSecOps practices.
Location: Must be local to the National Capital Region (NCR). This position offers significant remote flexibility, with occasional onsite meetings in Arlington, VA as required by the customer
Citizenship & Clearance Requirement: per client requirements, must be a US Citizen with an active DoD Secret (or higher) clearance
Education Requirement: Bachelor’s Degree
540 Internal Thrive Level: Senior DevSecOps Engineer
WHY 540?
540 is a forward-thinking company that the government turns to in order to #GetShitDone. We do more than talk about it, we break down barriers to innovation and build impactful tech. We’re looking for someone with big ideas, who thrives on innovation and is a self-starter. If you love to learn about and work with new technologies, we want to talk to you.
REQUIRED SKILLS & EXPERIENCE
- 12+ years of overall experience
- Strong problem solving and troubleshooting skills
- Ability to work independently (as if on an island) with clients, but also be a consummate team player
- DevSecOps & Infrastructure:
- Proven expertise with CI/CD pipeline management using Jenkins, Gitlab, Docker, and Artifactory
- Strong experience with configuration management tools like Ansible
- Strong experience with infrastructure as code (IaC) tools like Terraform
- Experience providing technical oversight and guidance on containerized applications and microservices, system administration, modernization, and migrations
- Hands-on experience with installation, configuration, testing, operation, upgrading, troubleshooting, and maintenance of technologies, and setting up appropriate monitoring and alerting tools
- Security & Compliance:
- Working knowledge of Risk Management Framework (RMF), STIG compliance/management, and secure DevOps practices
- Experience with identity and access management using ADFS/SAML
- Understanding of secure software development principles and integration of security controls into DevOps workflows
- Cloud & Architecture:
- Experience deploying to and managing workloads in cloud environments (Azure preferred)
- Expertise in managing the application layer, including virtual machines, network interfaces, application gateways, API management platforms, etc.
- Firm understanding of networking concepts
- Collaboration & Agile Delivery:
- Proficient in using Jira, Jira Service Desk, Slack and Confluence in Agile development environments
- Ability to work closely with development teams and provide guidance on release planning, environment configuration, and automation best practices
- Certifications:
- Currently possesses CompTIA Security+
- At least one of the following:
- Microsoft Certified: DevOps Engineer Expert
- Azure Administrator Associate
- AWS Solutions Architect and/or AWS Developer
- AWS SysOps Administrator
- Azure Database Administrator Associate
- Willingness and ability to obtain project-required industry cloud / security certifications within two months of employment and as needed
NICE TO HAVE SKILLS & EXPERIENCE
- Kubernetes or other container orchestration tools, to expand container management capabilities beyond Docker
- Experience with automated testing frameworks (e.g., JUnit, Selenium, Karma, Jasmine) to support shift-left testing practices
- Familiarity with message brokers like RabbitMQ and/or Redis for managing distributed systems and microservice communications
- Exposure to ElasticSearch (and ELK stack) for centralized logging, analytics, and search capabilities
- Knowledge of Git workflows and branching strategies, including use of Bitbucket or Gitlab
- Prior experience supporting Java-based applications, as well as related frameworks and tooling
- Understanding of SonarQube for static code analysis and integrating code quality gates in CI/CD pipelines
- Familiarity with SQL (PostgreSQL) and NoSQL(MongoDB) databases, as well as general database administration best practices
- Background supporting API-first applications or managing API lifecycles built around API management tools like Apigee or Tyk
- Experience with cloud migrations, rearchitecture to leverage cloud-native services, and managing resource provisioning and scaling
- Prior experience supporting or sustaining platforms in a federal or DoD environment, especially involving secure, regulated, compliance-driven environments and DoD 8000-series information security requirements
BENEFITS & PERKS
- Health, dental and vision insurance plans
- Flexible Spending Account (FSA)
- 401k with employer match
- Company Sponsored Life Insurance, Short and Long Term Disability coverage
- Flexible PTO + all Federal holidays off
- Professional development opportunities (training, certifications, conferences)
- Paid cloud developer accounts
- Referral Bonus - good people know good people
- Annual Social Events (540 week, hackathon, charity golf tournament, etc.)
- Access to 540’s Washington Capitals & Nationals tickets
EQUAL EMPLOYMENT OPPORTUNITY (EEO)
540's policy is to provide equal employment opportunity to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.
Apply for this job
*
indicates a required field