Staff DevSecOps Engineer in Falls Church

Job Description

Staff DevSecOps Engineer

\n

Location: Falls Church, VA, US

\n

Industry: Technology / Cybersecurity / Defense & Aerospace

\n

Work Setting: On-site

\n

Employment Type: Full-time

\n

About the Role

\n

Seeking a Staff DevSecOps Engineer to support software development teams across GitLab, CI/CD, cloud infrastructure and security. This role will focus on improving developer workflows, maintaining DevSecOps platforms and integrating security throughout the software development lifecycle.

\n

Key Responsibilities

\n

\n
• Manage and support self-hosted GitLab, including upgrades, backups, permissions and integrations.

\n

• Build, troubleshoot and optimise GitLab CI/CD pipelines.

\n

• Configure GitLab Runners, artifact management, caching and automated testing/deployment.

\n

• Integrate SAST, DAST, SCA, secret scanning, container scanning and SBOM capabilities.

\n

• Administer Linux environments including RHEL, Rocky Linux and Ubuntu.

\n

• Support Docker/container environments and container registries.

\n

• Work with tools such as JFrog Artifactory and SonarQube.

\n

• Develop automation using Bash, Python and PowerShell.

\n

• Create reusable CI/CD templates, documentation, runbooks and developer onboarding materials.

\n

• Troubleshoot developer issues involving GitLab, CI/CD, repositories, permissions and environments.

\n

• Support secure SDLC practices, security controls and compliance requirements.

\n

• Monitor platform performance, reliability and security and drive continuous improvement.

\n

\n

Requirements

\n

\n
• Bachelor’s degree in Computer Science, IT, Cybersecurity or related field, or equivalent experience.

\n

• 3+ years of experience in DevOps or DevSecOps.

\n

• Strong GitLab CI/CD experience, including pipeline development and troubleshooting.

\n

• Linux administration experience.

\n

• Experience with Docker and container technologies.

\n

• Scripting experience with Bash, Python or PowerShell.

\n

• Experience integrating security tools into CI/CD pipelines.

\n

• Strong understanding of Git, software development workflows and developer support.

\n

• Ability to document processes and provide technical guidance/training.

\n

• Active Top Secret clearance or eligibility to obtain one.

\n

• CompTIA Security+ CE within 120 days of hire.

\n

\n

\n

\n
• TS/SCI with polygraph.

\n

• Self-hosted GitLab administration.

\n

• JFrog Artifactory, Nexus or GitLab Registry.

\n

• Terraform, Azure Bicep, Ansible or Helm.

\n

• Kubernetes or OpenShift.

\n

• Container security, SBOMs and artifact signing.

\n

• Experience with NIST, DoD, FedRAMP or similar security frameworks.

\n

• Experience working in classified, air-gapped or disconnected environments.

\n

\n

Benefits

\n

\n
• PTO and flexible scheduling

\n

• 401(k) with 5% contribution

\n

• 5% ESOP

\n

• Medical, dental and vision coverage

\n

• Life and long-term insurance

\n

• Education assistance

\n

• Parental and bereavement leave

\n

\n