Senior DevSecOps Engineer, DEFCON AI

• 8+ years of DevOps/DevSecOps engineering experience, including at least one production pipeline owned end-to-end at scale
• 5+ years experience operating in DoW cloud environments (Azure Gov IL-5, AWS GovCloud, or equivalent IL-5 authorized environment). Working knowledge of DoW impact-level boundaries and the CC SRG.3
• Hands-on experience managing at least one complete ATO or cATO pathway in production
• US Citizenship Required
• Active Secret Clearance (TS/SCI preferred)
• Willingness to travel up to 25% to USMC sites, Defcon AI HQ, and industry vendor facilities as required

Desirable

• This is a rare opportunity to build a production deployment pipeline for mission-critical DoW software from the ground up
• As the DevSecOps Project Lead, you will own the end-to-end software delivery lifecycle—from code intake through secure, scalable production deployment. Your charter is simple but high-stakes: ensure that software can be deployed reliably, securely, and on mission timelines in DoW environments
• You will design and operate the DevSecOps pipeline, define the hosting architecture, and integrate security and compliance directly into delivery
• This role spans both modern commercial DevOps practices and the realities of DoW deployment (IL-5 today with a path to IL-6), requiring you to make critical decisions across government networks, cloud environments, and hybrid architectures
• This is a senior role combining hands-on execution with system-level ownership. You will build key components directly while guiding the transition from an existing government-furnished environment to a scalable, long-term production system
• Hosting Architecture & Production Environment
• Design and scale hosting architecture in IL-5 environments with a path to IL-6
• Evaluate and select deployment strategies across government networks, GovCloud, and hybrid platforms
• Build a production environment that supports zero-downtime deployments and enterprise-scale growth
• DevSecOps Pipeline Ownership
• Design, build, and operate a modern CI/CD pipeline with integrated testing, security scanning, and compliance validation
• Establish and manage development, staging, and production environments
• Ensure alignment with DoW requirements (e.g., Iron Bank, STIGs, ACAS/OpenSCAP, FIPS)
• Transition & System Consolidation
• Lead transition from incumbent contractor and government-furnished environments
• Inventory, assess, and rationalize existing services, dependencies, and infrastructure
• Simplify and consolidate architecture into a scalable, maintainable system
• Release Management & Delivery Performance
• Own release cadence from capability intake through production deployment
• Ensure deployment quality through monitoring, rollback readiness, and performance metrics (e.g., uptime, failure rates)
• Support continuous delivery aligned with government timelines and operational needs
• Security Integration & ATO Readiness
• Partner with Platform Security and RMF leadership to align on ATO strategy
• Ensure the pipeline generates required artifacts for authorization and continuous compliance
• Embed security and compliance into the delivery lifecycle—not as a post-deployment step
• What Success Looks Like:
• A reliable, repeatable production deployment pipeline operating with a predictable cadence
• A clear, effective deployment strategy across both government and industry environments
• Seamless transition from incumbent systems with no disruption to mission capability
• ATO and compliance requirements integrated directly into the pipeline
• Infrastructure and deployment bottlenecks resolved to support enterprise-scale operations