Note: The job is a remote job and is open to candidates in USA. Sabel Systems designs and delivers secure digital engineering ecosystems for Department of Defense programs. The DevOps Engineer will design, build, and maintain secure cloud infrastructure, automate infrastructure and deployments, implement DevSecOps security controls and monitoring, and support classified systems and development teams.
Responsibilities
- Design, build, and maintain secure cloud infrastructure and platforms for classified DoD systems, incorporating security controls at every layer (network, compute, storage, application)
- Develop and deploy infrastructure-as-code (IaC) using secure, version-controlled approaches (Terraform, CloudFormation, Ansible); implement security controls and compliance requirements through code
- Implement and maintain security hardening standards for Kubernetes clusters, Docker containers, Linux/Windows servers, and cloud resources in accordance with DISA STIGs, NIST guidelines, and DoD security baselines
- Manage network security controls including firewalls, WAF (Web Application Firewalls), network segmentation, access controls (ACLs), and encryption for data in transit and at rest
- Design and implement secrets management solutions (HashiCorp Vault, cloud-native secret managers) to protect credentials, API keys, certificates, and sensitive configuration data
- Design, implement, and maintain secure CI/CD pipelines that enforce security controls throughout the build, test, and deployment process
- Implement automated security scanning at multiple pipeline stages: static application security testing (SAST), dynamic application security testing (DAST), interactive application security testing (IAST), container scanning, and infrastructure-as-code scanning
- Conduct software composition analysis (SCA) to identify and remediate vulnerable dependencies and track open-source license compliance
- Ensure system architecture and configurations comply with DoD security requirements, including DISA Risk Management Framework (RMF), NIST security controls, FISMA requirements, and system security plans (SSPs)
- Implement continuous monitoring and compliance scanning to detect security misconfigurations, unauthorized changes, and control violations in near-real-time
- Configure and manage Security Information and Event Management (SIEM) systems and security monitoring tools to provide visibility into infrastructure and application security events
- Serve as a subject matter expert in incident response for infrastructure and application security incidents; investigate security events and coordinate remediation efforts
- Provide technical support for application development teams, assisting with deployment issues, troubleshooting, and operational runbooks
- Develop and maintain comprehensive technical documentation including architecture diagrams, runbooks, standard operating procedures (SOPs), and security configurations
- Collaborate with security teams, software developers, systems architects, and IT operations to integrate security into development and operations processes
Skills
- US Citizen with Top Secret security clearance with SCI eligibility; experience in classified environments
- Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Information Security, or related field; relevant professional experience may substitute
- 10+ years of professional experience in systems administration, infrastructure operations, DevOps, cloud engineering, or cybersecurity
- 5+ years of hands-on DevOps or DevSecOps experience including infrastructure automation, CI/CD pipeline development, and cloud platform management
- 5+ years of hands-on cybersecurity experience including security architecture, threat modeling, vulnerability assessment, or security engineering
- Advanced proficiency in Linux administration (Red Hat, CentOS, Ubuntu); strong understanding of Linux security, hardening, and compliance
- Advanced expertise with Kubernetes cluster management and security; hands-on experience deploying, securing, and troubleshooting Kubernetes in production environments
- Proficient with container technologies (Docker, Podman); understanding of container security, image scanning, and supply chain security
- Hands-on expertise with at least one major cloud platform (AWS, Azure, GCP, or DoD-specific clouds); strong understanding of cloud security models, IAM, and compliance
- Experience with DoD-specific cloud platforms (AWS GovCloud, Microsoft Azure Government, CloudOne, Platform One) or equivalent compliance-heavy environments
- Expert-level scripting ability in Python, Bash, Go, or PowerShell; ability to develop complex automation solutions and tools
- Advanced proficiency with infrastructure-as-code (IaC) tools such as Terraform, CloudFormation, Ansible, or Helm; experience implementing IaC security practices
- Expert-level experience with CI/CD platforms (Jenkins, GitLab CI, GitHub Actions, or equivalent); ability to design and implement secure pipelines
- Hands-on experience with security scanning tools including SAST (SonarQube, Checkmarx), DAST, container scanning, IaC scanning, and SCA tools
- Experience with monitoring and observability platforms (Prometheus, ELK Stack, Splunk, DataDog, or equivalent); ability to design comprehensive monitoring strategies
- Hands-on experience with SIEM systems and security monitoring; understanding of log aggregation, correlation, and alerting
- Experience with Windows Server administration and security; knowledge of Active Directory and group policies
- Current CompTIA Security+ (CE) certification required
- Strong understanding of NIST Cybersecurity Framework, security controls, and DoD security requirements; familiarity with DISA RMF process
- Willingness to be on-call for incident response and critical infrastructure issues; flexibility for occasional travel to classified facilities
- CISSP, CCSK, or other advanced security certifications strongly preferred
- Advanced security certifications (CISSP, CCSK, CEH, OSCP, CKA) or equivalent recognized credentials
- Kubernetes certifications (CKA, CKAD, KCNA) or equivalent demonstrated expertise
- Cloud certifications from AWS, Azure, or GCP focusing on security and architecture
- Experience with DISA Security Technical Implementation Guides (STIGs) and hardening guidance
- Experience with DoD Risk Management Framework (RMF) process including system categorization, security control selection, and control implementation
- Experience with secrets management tools (HashiCorp Vault, cloud-native secret managers) in production environments
- Experience with Web Application Firewalls (WAF), intrusion detection/prevention systems (IDS/IPS), and network security tools
- Experience with security incident response, forensics analysis, or threat intelligence
- Experience with threat modeling methodologies (STRIDE, PASTA) and security architecture design
- Experience with supply chain security, software bill of materials (SBOM), and artifact repository security
- Familiarity with DoD acquisition processes and systems engineering practices
Benefits
- Healthcare
- Financial assistance in the event of illness, injury, disability, loss of work, or death
- Health savings accounts
- Retirement plans
- Paid time off
- Paid holidays
- Education and training program reimbursement
Company Overview