Mid-Level DevSecOps Engineer
$69,550–$125,725 year
On-siteHuntsville, Alabama, United States
Job Summary
Design, implement, and continuously improve DevSecOps pipelines and practices across the organization by integrating security controls and automated testing into CI/CD processes. Establish secure software development lifecycle standards, enforce Infrastructure as Code principles, and oversee containerization strategies using Docker. Manage secrets management, identity and access controls, and zero-trust security models while ensuring compliance with frameworks like NIST and RMF. Mentor engineers on secure coding and automation, evaluate new tools to improve delivery speed, and partner with leadership to define strategy and metrics. Support audit and accreditation activities, including documentation and evidence collection, to drive a culture of shared responsibility for security and performance.
Required Qualifications
- BS degree in computer science or related technical degree
- MS degree in computer science or related technical degree
- 2-4 years of prior relevant experience
- 1+ years of experience in software engineering, DevOps, or DevSecOps roles
- On-site work (no remote/hybrid options)
- Ability to obtain and maintain a Security+ Certification
- Hands-on experience designing and implementing CI/CD pipelines using tools such as Jenkins, GitLab CI/CD, GitHub Actions, or similar
- Proficiency in containerization and orchestration technologies (Docker, Kubernetes)
- Solid scripting and automation skills in languages such as Python, Bash, or PowerShell
- Excellent problem-solving skills and ability to operate in fast-paced, mission-critical environments
- Strong understanding of Linux operating systems, including system administration, troubleshooting, and performance tuning
- Strong collaboration and written communication skills
- Must be a U.S. citizen
- Ability to obtain and maintain a Final Secret Clearance
- Must be a resident of Huntsville, AL or willing to relocate to the Huntsville, AL area
Desired Qualifications
- IAT Level II or Linux OS based certification
- Proven experience integrating security practices into the software development lifecycle (SDLC), including SAST, DAST, dependency scanning, and container security
- Experience with Infrastructure as Code (IaC) tools such as Terraform, CloudFormation, or Pulumi
- Strong knowledge of security frameworks and compliance standards (e.g., NIST, RMF, SCAP, STIGs, etc.)
- Experience implementing identity and access management (IAM), secrets management, and zero-trust architectures
- Experience working in Agile/Scrum environments and collaborating with cross function teams
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.