DevSecOps Engineer - General

Pegasi Defense is seeking an experienced DevSecOps Engineer to support the operations, maintenance, security, and continuous improvement of mission-critical enterprise applications and infrastructure within a Department of Defense (DoD) environment.

The DevSecOps Engineer will be responsible for maintaining, securing, automating, and optimizing enterprise application infrastructure and deployment processes. This position will focus on production system stability, continuous integration and continuous delivery (CI/CD), infrastructure automation, vulnerability remediation, system monitoring, and compliance with DoD cybersecurity requirements.

The ideal candidate will have strong experience supporting production environments, troubleshooting complex infrastructure and application issues, and implementing secure DevSecOps practices within highly regulated federal environments.

Key Responsibilities

DevSecOps Engineering & Automation • Develop, maintain, and enhance CI/CD pipelines to automate application builds, testing, security scanning, and deployments. • Implement automated deployment processes to improve system reliability, consistency, and operational efficiency. • Develop and maintain Infrastructure as Code (IaC) using tools such as Terraform, Ansible, or comparable technologies. • Integrate security testing and vulnerability detection into application deployment workflows. • Develop scripts and automation solutions using Python, Bash, PowerShell, or similar languages. • Support configuration management, version control, release management, and deployment rollback procedures.

Operations & Maintenance (O&M) • Provide ongoing operational support for enterprise applications, servers, databases, and supporting infrastructure. • Monitor production system health, availability, performance, and resource utilization. • Troubleshoot and resolve application, operating system, infrastructure, and deployment-related issues. • Support operating system upgrades, application patching, database maintenance coordination, and scheduled maintenance activities. • Maintain and optimize Red Hat Enterprise Linux (RHEL) environments. • Coordinate with software developers, database administrators, cybersecurity personnel, and system administrators to resolve complex technical issues. • Support incident management, root cause analysis, problem resolution, and corrective actions. • Develop and maintain operational procedures, technical documentation, system configurations, and maintenance runbooks. • Support backup, recovery, disaster recovery, and business continuity activities.

Cybersecurity & Compliance • Implement and maintain secure configurations in accordance with DoD Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs). • Support the DoD Risk Management Framework (RMF), Authority to Operate (ATO), and continuous monitoring requirements. • Identify, analyze, prioritize, and remediate system vulnerabilities using approved security scanning and assessment tools. • Support vulnerability management activities involving ACAS/Nessus, container scanning, software composition analysis, and other approved tools. • Collaborate with Information System Security Officers (ISSOs), Information System Security Engineers (ISSEs), and cybersecurity teams to address security findings and maintain compliance. • Support the implementation of security controls aligned with NIST SP 800-53 and applicable DoD cybersecurity policies. • Maintain audit logs, security monitoring capabilities, configuration baselines, and compliance evidence. • Implement secure access controls, certificate management, and secrets management practices.

Infrastructure & Application Support • Support enterprise Linux environments, application servers, and associated infrastructure components. • Assist with Oracle database connectivity, performance troubleshooting, patching coordination, and application integration. • Support web-based enterprise applications, APIs, middleware, and supporting services. • Troubleshoot networking, DNS, TLS/SSL certificates, authentication, and connectivity issues. • Support containerized applications and orchestration platforms such as Docker and Kubernetes, where applicable. • Assist with infrastructure capacity planning, performance optimization, and system modernization initiatives. • Support secure integration and interoperability between enterprise applications and external systems. • Collaboration & Continuous Improvement • Participate in Agile development and operational support activities, including sprint planning, technical reviews, and release coordination. • Collaborate with government stakeholders, development teams, system administrators, and cybersecurity personnel. • Identify opportunities to improve deployment automation, monitoring, system reliability, and security. • Support change management processes and ensure changes are appropriately tested, documented, and approved before production deployment. • Assist with technical evaluations, system upgrades, and modernization planning while minimizing disruption to existing operations.

Required Qualifications • Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related technical field. Equivalent relevant experience may be considered. • 4+ years of experience in DevOps, DevSecOps, systems engineering, infrastructure engineering, or related technical roles. • Experience supporting enterprise production applications in a federal government, DoD, or similarly regulated environment. • Strong experience administering and troubleshooting Red Hat Enterprise Linux (RHEL) or comparable Linux operating systems. • Hands-on experience with CI/CD tools such as Jenkins, GitLab CI/CD, GitHub Actions, or Azure DevOps. • Experience with configuration management and infrastructure automation using Ansible, Terraform, or similar tools. • Proficiency in scripting and automation using Python, Bash, or comparable scripting languages. • Experience with Git-based version control and software release management. • Knowledge of application security, vulnerability management, secure system configuration, and automated security testing. • Familiarity with DISA STIGs, DoD RMF, NIST SP 800-53, and federal cybersecurity compliance requirements. • Experience troubleshooting enterprise application infrastructure, networking, authentication, and system performance issues. • Understanding of relational databases, particularly Oracle, and their integration with enterprise applications. • Strong analytical, troubleshooting, documentation, and communication skills. • Ability to work collaboratively with development, infrastructure, database, and cybersecurity teams.

Preferred Qualifications • Previous experience supporting mission-critical DoD or federal government enterprise systems. • Experience supporting high-availability enterprise applications. • Experience with Oracle database environments and associated operational maintenance activities. • Experience with container technologies, including Docker, Kubernetes, or OpenShift. • Experience with AWS GovCloud, Azure Government, or other government-authorized cloud environments. • Familiarity with enterprise monitoring and logging solutions such as Splunk, Prometheus, Grafana, or the ELK Stack. • Experience with automated security scanning tools such as SonarQube, Fortify, Checkmarx, Trivy, or comparable solutions. • Experience with ACAS/Nessus, STIG compliance scanning, and vulnerability remediation. • Familiarity with secure software supply chain practices. • Experience supporting ATO packages, continuous monitoring, and RMF security control assessments. • Knowledge of identity and access management, PKI, CAC/PIV authentication, and secure enterprise application access. • Experience supporting modernization or migration of legacy enterprise systems. • Relevant certifications such as CompTIA Security+, RHCSA, RHCE, CKA, AWS Certified DevOps Engineer, or CISSP.

Security Requirements • Must be a U.S. citizen. • Must possess or be eligible to obtain the security clearance required for the position. • Must meet applicable DoD cybersecurity workforce qualification requirements. • Must comply with all applicable government security, access control, and information protection requirements.