DevSecOps

our Impact:

Are you interested in using your skills to help shape the Cyber, Security, & Intel space? If so, look no further. Amentum is seeking a Dev Sec Ops  Engineer to join our team of passionate individuals in Hanover, MD
. In this role you will support challenging, mission‑critical projects that make a direct impact on the Nation’s security and intelligence mission.

We train like we fight! If you want to be part of a dynamic Team developing engaging and hands‑on training solutions, this is the place for you!

We are currently seeking a Dev Sec Ops  Engineer in Hanover, MD (Development, Security, and Operations). The applicant will be part of an Infrastructure Team supporting the Capabilities and Dev Ops team enabling the delivery of a dynamic course curriculum. The Dev Sec Ops  engineer will be involved in the creation of an integrated Infrastructure/Dev Sec Ops  environment. The Dev Sec Ops  engineer will be involved in the final testing, preparation, and deployment of tools and services created or used by the Capabilities team as well as configuring and managing the dev, testing, and production environment.

If you are a Dev Sec Ops  engineer, or a software engineer with Dev Ops experience, team player, and a self‑starter, then this is the position for you.

Duties will include maintaining multiple Kubernetes clusters for build, test, and production environments, setting up supporting services, and coordinating accesses for development staff and end‑users, validating products and managing deployments. This will include the following actions and more as requirements demand:

• Deploying, troubleshooting, and analyzing systems and services to support course delivery.
• Performing system modeling, simulation, and analysis.
• Providing input for documentation and logic/data flow design of new or existing programs.
• Verifying accuracy and completeness of programs by preparing sample data, conducting program tests, analyzing test results, and debugging program errors.

Dev Sec Ops  Engineers must be able to successfully demonstrate the following capabilities:

• Design, implement, and maintain secure CI/CD pipelines that automate build, test, and deployment processes across multiple environments (development, staging, and production).
• Manage and optimize container orchestration platforms (e.g., Kubernetes, Docker Swarm) to ensure scalability, resilience, and compliance with program security standards.
• Deploy and maintain infrastructure‑as‑code (IaC) using tools such as Helm to achieve repeatable, auditable, and version‑controlled environments.
• Integrate security scanning and compliance checks into CI/CD workflows for container images, source code, and infrastructure templates.
• Monitor, log, and analyze system and application performance using enterprise observability tools to ensure reliability, uptime, and host stability.
• Administer and harden on‑premise systems, including virtual machines, storage servers, and database hosts, in accordance with program IT policies.
• Collaborate with development teams to define deployment requirements, troubleshoot build and runtime issues, and streamline the path from code to production.
• Implement and enforce identity and access management best practices, including secrets management, RBAC (Role‑Based Access Control), and least privilege principles.
• Support incident response and vulnerability management processes through root cause analysis, patching, and continuous improvement of security posture.
• Document and maintain operational runbooks, playbooks, and system diagrams to promote transparency, consistency, and knowledge sharing across the team.
• Continuously evaluate and improve automation, monitoring, and security tool chains to align with evolving business and compliance requirements.
• Effectively communicate complex infrastructure and security concepts to technical and non‑technical stakeholders, supporting cross‑functional decision‑making.

• Experience developing using one or more of the following languages:
  Ruby, Ruby on Rails, Python, or C++, JavaScript/Type Script.
• Requires demonstrated proficiency in web UI interface…