# DevSecOps Engineer - SME

**Company**: Dark Wolf
**Location**: Chantilly, VA
**Experience**: senior
**Job type**: full-time
**Salary**: $185,000.00 – $240,000.00+
**Category**: Engineering
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/darkwolfsolutions/jobs/7886303003?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_e82a87a5-fe4

## Description

Dark Wolf is seeking a DevSecOps Subject Matter Expert (SME) to architect, lead, and optimize Continuous Integration/Continuous Deployment (CI/CD) tooling, security paradigms, and operational observability across the entire software development lifecycle.

In this role, you will serve as the principal authority on modern DevSecOps strategies, driving shift-left security practices, zero-trust architectures, and high-reliability platform engineering.

Key Responsibilities:

- Enterprise CI/CD Strategy & Operations: Architect, maintain, and optimize mission-critical CI/CD pipelines and infrastructure, leveraging tools such as Jenkins, GitLab CI/CD, and enterprise automation engines.

- Automated Security Integration & Continuous ATO: Spearhead the seamless integration of dynamic security tools and automated governance into pipelines,including SAST, DAST, dependency scanning, and container analysis,to support Continuous Authority to Operate (cATO).

- Testing & Quality Framework Design: Establish and maintain comprehensive automated testing architectures covering unit testing, integration testing, and User Acceptance Testing (UAT).

- Vulnerability & Threat Remediation: Lead cross-functional collaboration with software development and security teams to proactively identify, prioritize, and remediate application and infrastructure vulnerabilities.

- Governance & Standards Compliance: Define and enforce compliance strategies aligned with federal security regulations, DoD guidelines, and strict agency security standards.

- Technical Leadership & Innovation: Drive DevSecOps roadmaps, evaluate cutting-edge tools, define infrastructure-as-code (IaC) governance, and mentor multi-disciplinary engineering teams.

Qualifications:

- Clearance: Must be a US Citizen holding an active TS/SCI security clearance with an active Full-Scope Polygraph.

- Education: Bachelor's degree in Computer Science, Information Systems, Engineering, or a related technical field.

- Experience: Minimum 15+ years of total technical experience, with at least 7+ years specializing in building, securing, and maintaining automated CI/CD pipelines.

- Infrastructure Automation: Minimum 7+ years of hands-on experience using automation tools for infrastructure provisioning and configuration management (e.g., Terraform, Ansible).

- Source Control & Developer Tooling: Expert-level proficiency with version control systems and ecosystem platforms (e.g., Git, GitLab, Jira).

- Systems & Networking Mastery: Strong understanding of Containerization, Linux systems administration, kernel-level operations, and fundamental networking protocols.

- Communication & Leadership: Superior problem-solving skills and excellent communication abilities to articulate complex technical architectures, risks, and strategies to executive leadership, technical teams, and government stakeholders.

- Security Discipline: Deep commitment to adhering to strict security protocols, defensive systems design, and DoD/IC best practices.

Core SME Technical Competencies:

- Continuous ATO (cATO) & Compliance-as-Code: Proven expertise translating NIST SP 800-53, DISA STIGs, and CNSSI 1253 controls into automated pipeline validation checks (e.g., using OSCAL, Open Policy Agent).

- Air-Gapped & High-Security Environment Engineering: Hands-on experience designing, deploying, and maintaining CI/CD pipelines and mirror repositories within disconnected, air-gapped, or Cross Domain Solution (CDS) networks.

- Advanced Container Orchestration Security: Expert-level knowledge of Kubernetes security architectures, Service Mesh traffic policies (Istio), Admission Controllers (OPA/Gatekeeper, Kyverno), and runtime security tooling (Falco).

- Zero Trust & Secrets Lifecycle Management: Architecture experience implementing identity-aware security models and enterprise secrets management solutions (HashiCorp Vault, AWS Secrets Manager) for automated dynamic dynamic secret rotation.

Desired Qualifications:

- Programming & Scripting: Strong proficiency in programming/scripting languages such as Python, Go, Bash, or C/C++.

- Containerization: Deep practical experience with containerized software practices and container runtimes (Docker, Podman, Kubernetes).

- Agile Frameworks: Experience driving outcomes within Agile, Scrum, or SAFe software engineering methodologies.

- Multi-Cloud Architecture: Direct experience architecting secure cloud platforms across AWS, Azure, GCP, or specialized IC cloud environments (C2S/GovCloud).

- Security Scanning Tooling: Deep familiarity with modern vulnerability management and static/dynamic scanning tools (e.g., SonarQube, Snyk, Trivy, OWASP ZAP, Fortify).

Advanced Certifications:

- Certified Kubernetes Security Specialist (CKS) or Certified Kubernetes Administrator (CKA)

- Certified Information Systems Security Professional (CISSP)

- AWS Certified DevOps Engineer – Professional

- CompTIA Security+ or GIAC DevSecOps Automation (GCSA)

## Skills

### Required
- CI/CD
- DevSecOps
- Jenkins
- GitLab CI/CD
- Terraform
- Ansible
- Kubernetes
- Linux systems administration
- Git
- Jira
- Python
- Go
- Bash
- C/C++
- Containerization
- Agile
- Scrum
- SAFe
- AWS
- Azure
- GCP
- SonarQube
- Snyk
- Trivy
- OWASP ZAP
- Fortify

### Nice to have
- Certified Kubernetes Security Specialist (CKS)
- Certified Kubernetes Administrator (CKA)
- Certified Information Systems Security Professional (CISSP)
- AWS Certified DevOps Engineer – Professional
- CompTIA Security+
- GIAC DevSecOps Automation (GCSA)

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/darkwolfsolutions/jobs/7886303003?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)