Senior DevSecOps & Software Engineer

ACT1 Federal is 100% employee-owned and has supported the Department of War for nearly thirty years. This role supports defense industrial base assessment work at DASN (DIB) in Arlington, Virginia, with an in-office day schedule and Government-approved DevSecOps and security engineering expectations.

Salary: USD 170,000 - 200,000 per year. Clearance: Current Top Secret and SCI eligibility required. Travel: May require occasional domestic travel.

What You’ll Be Doing

You will deliver senior-level software engineering, DevSecOps, cybersecurity engineering, and implementation support for DASN (DIB) data-management and performance-assessment initiatives. Work includes developing and sustaining software applications and analytic tools used for defense industrial base assessment, from design and build through testing, containerization, securing, and deployment through Government-approved pipelines and environments.

• Design, develop, test, document, maintain, and support deployment of software applications, analytic tools, data services, application programming interfaces (APIs), and related components.
• Build applications using Python or comparable modern programming languages, frameworks, libraries, and practices aligned to Government-approved technical environments.
• Design and implement secure application architectures, including APIs, data integrations, authentication and authorization mechanisms, error handling, logging, monitoring, and performance management.
• Containerize applications and services, develop container-orchestration configurations, and support deployment across Government-approved development, testing, staging, and production environments.
• Develop and improve CI/CD pipelines, source-code-management practices, artifact-management processes, automated testing, release-management workflows, and deployment automation, as authorized by the Government.
• Create infrastructure-as-code artifacts and automation scripts, configuration-management approaches, deployment manifests, and repeatable environment configuration practices for delivery and sustainment.
• Support integration with Department of War software factories, enterprise pipelines, cloud services, data platforms, source systems, and other Government-approved technical environments.
• Support deployment and sustainment of approved analytics, data engineering, artificial intelligence, machine learning, reporting, and business intelligence applications developed within or provided to DASN (DIB).
• Provide technical implementation, documentation, remediation, and coordination support for Government-led Risk Management Framework (RMF) activities.
• Implement and document security controls and secure configuration practices, support vulnerability identification and remediation, and support Security Technical Implementation Guide assessment and remediation, continuous monitoring, and authorization-package development.
• Produce technical artifacts for Government security review, assessment, authorization-package, and continuous-monitoring activities, including system descriptions, architecture diagrams, control-implementation narratives, configuration documentation, test evidence, and remediation plans.
• Perform code reviews and secure software development activities such as static and dynamic application-security testing, dependency analysis, container scanning, and configuration reviews.
• Prepare executive briefings, technical memoranda, implementation plans, architecture diagrams, decision packages, status reports, and risk summaries for senior technical and nontechnical stakeholders.
• Coordinate technical products and supporting information with DASN (DIB) directorates, ASN (RD&A) offices, DON acquisition organizations, DON enterprise service providers, Department of War stakeholders, cybersecurity organizations, and other Government-approved points of contact as directed by the Government.
• Support time-sensitive taskers, technical reviews, executive engagements, and approved working groups associated with software development, DevSecOps, cybersecurity, data, analytics, and industrial-base performance-assessment initiatives.

Required Qualifications

• Bachelor’s degree from an accredited institution in a related quantitative discipline, such as data science, statistics, mathematics, economics, operations research, engineering, computer science, business analytics, or a related field.
• 10+ years of experience in software engineering, DevSecOps, platform engineering, cloud-native application development, cybersecurity engineering, or related technical fields.
• Demonstrated experience designing, developing, testing, containerizing, securing, and deploying production software applications.
• Demonstrated experience developing or maintaining CI/CD pipelines, source-code-management processes, artifact-management workflows, automated testing, deployment automation, and release-management practices.
• Demonstrated experience with Python or a comparable modern programming language.
• Demonstrated experience with container technologies, container orchestration, infrastructure as code, configuration management, cloud-native or enterprise application deployment, and automation.
• Demonstrated experience with APIs, data integrations, and enterprise application services.
• Demonstrated experience supporting RMF technical implementation, security-control implementation, security documentation, vulnerability management, Security Technical Implementation Guide assessment and remediation, or authorization-package development.
• Ability to communicate technical risks, implementation status, security findings, architecture decisions, and delivery tradeoffs to senior technical and nontechnical stakeholders.
• At least one relevant cybersecurity, cloud-security, DevSecOps, container-security, software-engineering, or Department of War workforce-qualification certification.
• May require support outside normal business hours for time-sensitive transaction, interagency, executive, or industrial-base requirements.
• Current Top Secret and SCI eligibility required.

Benefits

• Medical/Dental/Vision Insurance
• ACT1 Employee Stock Ownership Plan (ESOP)
• Company Paid Life and AD&D Insurance
• Company Paid Short-Term Disability
• Voluntary Long-Term Disability
• Flexible Spending Accounts (FSA)
• Health Savings Account (HSA)
• 401K with employer match
• Paid Time Off
• Paid Holidays
• Parental Leave
• Military Leave
• Education, Training & Professional Development
• Voluntary Accidental Injury/Critical Illness/Hospital Care
• Voluntary Pet Insurance, Legal Resources, and Identity Protection

Technologies

• Python
• Container technologies
• Container orchestration
• Infrastructure as code
• Configuration management
• Artificial intelligence
• Machine learning
• Application programming interfaces
• Static and dynamic application-security testing
• Dependency analysis
• Container scanning