Position Summary:
MAG is recruiting for a DevSecOps Engineer who will enable rapid, secure delivery of tactical capabilities through world-class automation. You'll build the infrastructure and pipelines that allow a small team to deliver like a large organization while maintaining security in contested environments.
US Citizens Only
Former US Defense Contractor / US Gov / US Military Experience Only
This is a Hybrid Position - Remote mainly - but as well on call to come into a MAG office when requested.
We are seeking candidates who live in proximity to our corporate HQ in Fairfax, VA primarily but will entertain persons living near our satellite offices in:
Aberdeen, MD - Titusville, FL - Newport News, VA - Carthage NC
Essential Duties and Responsibilities:
-
Design and implement CI/CD pipelines for multi-architecture deployments
-
Develop Infrastructure as Code (IaC) for hybrid cloud/edge environments
-
Implement container orchestration for resource-constrained platforms
-
Create automated testing frameworks (unit, integration, security, performance)
-
Build observability solutions (metrics, logging, tracing, profiling)
-
Develop GitOps workflows for configuration management
-
Optimize build processes for embedded and edge platforms
-
Implement security scanning in CI/CD pipelines (SAST, DAST, dependency scanning)
-
Automate compliance validation (STIG, RMF controls)
-
Design and implement secrets management solutions
-
Create security monitoring and incident response automation
-
Support security documentation and authorization packages
Requirements:
Primary Experience / Qualifications:
- 5+ years DevOps/DevSecOps experience
-
Expert-level knowledge of CI/CD platforms (Azure DevOps, GitLab CI, Jenkins)
-
Experience with artifact repositories (e.g., JFrog Artifactory, Sonatype Nexus, Azure Artifacts, to include Azure Container Registry) for managing diverse package types
-
Strong scripting skills (Python, Bash, PowerShell)
-
Extensive experience with containerization (Docker, Podman) and orchestration (Kubernetes)
-
Proficiency with IaC tools (Terraform, Ansible, Pulumi)
-
Experience with cloud platforms (Azure required, AWS/GCP beneficial)
-
Understanding of security scanning tools and practices
-
Experience with monitoring stacks (Prometheus, Grafana, ELK)
-
Knowledge of Git workflows and version control best practices
Preferred Qualifications
-
Experience with embedded system CI/CD and cross-compilation
-
Knowledge of military software development processes
-
Familiarity with RMF and security authorization processes
-
Experience with air-gapped and classified environments
-
Understanding of supply chain security and SBOM
-
Kubernetes certifications (CKA, CKS)
-
Experience with chaos engineering and resilience testingFamiliarity with Policy-as-Code (PaC) tools like Open Policy Agent (OPA) for automating governance and security checks
Education & Experience:
-
Bachelor's degree in CS, EE, or related field;
- Master's preferred
Clearance:
-
Must be eligible for Secret security clearance
-
Must be a US citizen
Special Note:
What Makes You Successful Here
-
You automate everything that can be automated
-
You treat infrastructure as code, not clickops
-
You build security into pipelines, not bolt it on after
-
You can work across cloud, on-prem, and edge environments
-
You measure success by how little manual work the team does
Why Join MAG:
-
Work on meaningful problems that directly impact national security
-
Small, elite team where your contributions matter immediately
-
Access to cutting-edge hardware and technologies
-
Rapid prototyping environment - see your ideas deployed in weeks
-
Direct interaction with end users and field deployments
-
Professional development and conference attendance support
-
Flexible work arrangements with occasional field exercises
-
Opportunity to shape the future of tactical edge computing
