Gray Analytics is seeking a skilled DevSecOps Engineer to join our team supporting the Tactical Innovation and Experimentation Laboratory (TIEL) program, with a strong focus on automation, security integration, and operational excellence within DoD environments. The ideal candidate will have a passion for designing, implementing, and maintaining secure, resilient infrastructure and CI/CD pipelines that enable rapid, reliable software delivery. This position requires someone who excels in bridging development, security, and operations disciplines and is committed to embedding security throughout the entire software development lifecycle.
The DevSecOps Engineer will serve as a key technical contributor on a collaborative DevSecOps team, working closely with developers, system administrators, and cybersecurity professionals to bring modern software development techniques to our DoD customers. The engineer will serve as an escalation point for critical and complex issues, perform configuration, integration, and testing of products, assist with developing and documenting work processes, and mentor other team members.
This role is primarily on-site and involves working on systems of varying classification levels across both online and offline (air-gapped) networks. The candidate will perform tasks on both physical and virtual Linux and Windows systems and will support the maintenance of the TIEL’s Authority to Operate (ATO).
- Design, implement, and maintain CI/CD pipelines that support the full software development lifecycle, from code commit through production deployment.
- Develop and maintain automation scripts and tools using Ansible and similar toolsets to streamline build, test, and deployment processes.
- Automate repetitive system administration and security tasks using shell scripting (Bash), Python, and configuration management tools to improve efficiency and reduce manual effort.
- Implement Infrastructure as Code (IaC) practices to ensure consistent, repeatable, and auditable environment provisioning.
- Integrate automated security testing, vulnerability scanning, and compliance checks into CI/CD pipelines to ensure secure code deployment.
- Support Risk Management Framework (RMF) processes and ensure systems comply with DoD security standards, STIGs, and applicable security technical implementation guides.
- Implement and maintain STIG compliance across Linux and Windows systems, including monitoring, testing, and remediation of findings using tools such as Ansible Automation Platform and Red Hat Satellite in offline environments.
- Implement and maintain system security measures, including role-based access control (RBAC), system firewalls, file system integrity monitoring, and encryption.
- Collaborate with cybersecurity teams to implement and maintain Security Information and Event Management (SIEM) technologies and techniques.
- Manage patch cycles, update management, and vulnerability remediation across development and production environments.
- Support the maintenance of the TIEL’s Authority to Operate (ATO) and system accreditation standards.
- Design, deploy, and maintain systems of varying complexity that support the DevSecOps paradigm in both Linux and Windows environments, with a primary focus on Red Hat Enterprise Linux (RHEL).
- Administer and support containerized environments using Kubernetes, Podman, and Red Hat OpenShift.
- Manage and maintain Red Hat Enterprise Linux, Red Hat Satellite, Ansible Automation Platform, VMware vCenter, Windows Server, and Windows 11 operating systems.
- Install, configure, and maintain Linux servers in both physical and virtual environments, including managing storage, networking, and virtualization (KVM).
- Implement and maintain single sign-on and multi-factor authentication systems in accordance with DoD guidelines and best practices.
- Manage data backup and disaster recovery solutions, ensuring data integrity and availability across physical and virtual environments.
- Support HPE Synergy storage and networking infrastructure.
- Conduct regular performance and security assessments of infrastructure, including troubleshooting and resolving hardware and software problems, scheduling upgrades, and collaborating with team members on network and system optimization.
- Develop and maintain monitoring, logging, and alerting solutions to support operational awareness and incident response.
- Develop and maintain detailed documentation for system configurations, operational procedures, security policies, and standard operating procedures.
- Research new technologies and leverage optimization techniques to ensure Linux and Windows systems operate efficiently.
- Stay current with emerging DevSecOps tools, technologies, and best practices, sharing knowledge to foster a culture of continuous improvement.
- Bachelor’s degree in computer science, Engineering, Information Technology, or a related field with a minimum of 3–5 years of related experience; OR High School Diploma or equivalent with a minimum of 7–10 years of related experience.
- Demonstrated experience working in DevSecOps, systems engineering, or infrastructure automation roles within DoD or defense contractor environments.
- Extensive experience with Linux operating systems, particularly Red Hat Enterprise Linux (RHEL), including installation, configuration, maintenance, and troubleshooting of both physical and virtual servers.
- Strong knowledge of Linux security best practices, including RBAC, system firewalls, file system integrity, and encryption.
- Proficiency in shell scripting (Bash) and at least one additional language (e.g., Python, Go, PowerShell) for automation of administration and DevSecOps tasks.
- Hands-on experience with CI/CD tools and platforms such as GitLab, Jenkins, or similar.
- Experience with automation and configuration management tools, particularly Ansible Automation Platform and Red Hat Satellite.
- Proficiency with containerization and orchestration technologies, including Kubernetes, Podman, Docker, and Red Hat OpenShift.
- Experience with Linux-based virtualization technologies (e.g., KVM) and VMware vCenter.
- Working experience with Windows Server and Windows 11 operating systems.
- Experience integrating Security Information and Event Management (SIEM) technologies.
- Experience with HPE Synergy storage and networking.
- Familiarity with Linux networking concepts and tools, as well as cloud platforms, virtualization technologies, and APIs.
- Experience with DoD security policies and compliance standards, such as RMF, NIST 800-53, and NIST 800-171.
- Must hold or be able to obtain a DoD 8140-compliant certification appropriate to the assigned Cyber Workforce Framework (DCWF) work role and proficiency level. Qualifying certifications include but are not limited to: CompTIA Security+ CE, CySA+, GICSP, GSEC, SSCP, CCNA, or equivalent as approved under the DoD 8140 Cyber Workforce Qualification Program.
US Citizenship required. Must possess a US DoD Secret clearance.
- Red Hat Certified Engineer (RHCE) or equivalent Linux certification.
- Prior experience with DoD programs, especially in Army Air and Missile Defense systems.
- Experience working in air-gapped or disconnected environments.
- Experience with monitoring tools for Linux systems (e.g., Nagios, Prometheus, Grafana, or similar).
- Familiarity with Agile software development methodologies and DevOps practices.
- Experience with Git-based configuration management and version control workflows.
- Understanding of RMF processes and DoD security standards (STIGs, NIST 800-53, NIST 800-171).
- Experience with single sign-on, multi-factor authentication, and identity management solutions.
- Familiarity with online collaboration tools (e.g., Microsoft Teams, SharePoint, JIRA).
- Experience automating repetitive system administration and security tasks.
- Knowledge of DevSecOps practices and tools within a Linux ecosystem.
About Gray Analytics
Gray Analytics values our employees as our most important resource. To showcase these values, we offer not only traditional medical, disability, life, etc. coverages that begin on day one of employment, but also unique benefits to improve our employees' quality of life. Some of these unique benefits include:
-
A PTO policy based on total years of experience, not years of service to the company. PTO is available for use immediately at hire, subject to company needs.
-
Eligibility for 401K contributions and company matching, Pet Insurance through Spot, Flexible Spending Account, and Tuition and Professional Development Funds begin on day one of employment.
-
Charitable donations program on a yearly and quarterly basis where employees can nominate a non-profit of choice to receive donations.
Gray Analytics is an Equal Opportunity Employer and VEVRAA Federal Contractor. This contractor and subcontractor shall abide by the requirements of 41 CFR 60-1.4(a), 60-300.5(a) and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on their race, color, religion, sex, gender identity, sexual orientation, or national origin. Moreover, these regulations require that covered prime contractors and subcontractors take affirmative action to employ and advance in employment individuals without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, protected veteran status or disability. Gray Analytics, Inc. welcomes minority and veteran applicants.
