DevSecOps Engineer - Clearance Required

Overview

LMI is seeking an experienced Dev Sec Ops  Engineer to support the U.S. Army Training Information System (ATIS) program. ATIS is a major Army initiative to modernize and consolidate Army training systems into a single, cloud-native, enterprise-level capability. As part of an Agile Release Train (ART) operating under the Scaled Agile Framework (SAFe), the Dev Sec Ops  Engineer will focus on integrating security controls, automation, and compliance throughout the entire Software Development Lifecycle (SDLC).

The incumbent will be responsible for implementing, managing, and continually optimizing security tools and processes within the CI/CD pipeline to ensure ATIS applications meet stringent Department of Defense (DoD) Risk Management Framework (RMF) and cybersecurity requirements.

LMI is a new breed of digital solutions provider dedicated to accelerating government impact with innovation and speed. Investing in technology and prototypes ahead of need, LMI brings commercial-grade platforms and mission-ready AI to federal agencies at commercial speed.

Leveraging our mission-ready technology and solutions, proven expertise in federal deployment, and strategic relationships, we enhance outcomes for the government, efficiently and effectively. With a focus on agility and collaboration, LMI serves the defense, space, healthcare, and energy sectors—helping navigate complexity and outpace change. Headquartered in Tysons, Virginia, LMI is committed to delivering impactful results that strengthen missions and drive lasting value.

Key Responsibilities:

• Design, extend, integrate, and implement existing and new CI/CD pipelines using Git Lab and IaC tools (e.g., Terraform, Cloud Formation).
• Continuous modernization of CI/CD techniques and practices as industry best practices evolve.
• Design, implement, and maintain security testing tools (SAST, DAST, SCA, IAST) directly into the ATIS CI/CD pipeline (e.g., Jenkins, Git Lab CI, Azure Dev Ops).
• Design and maintain AWS Gov Cloud environments following Dev Sec Ops  best practices.
• Ensure continuous integration of security testing tools (e.g., SAST, DAST, SCA, IAST) within the ATIS CI/CD pipeline.
• Provide guidance and training to development teams on secure coding practices and effective use of security tools.
• Participate in threat modeling and security architecture reviews for new features and system enhancements.
• Collaborate with Cybersecurity team to ensure continuous monitoring and reporting findings and assist with ATO Documentation.
• Develop and manage automated gates to enforce security policy checks, vulnerability scanning, and compliance requirements before deployment to testing and production environments.
• Facilitate and automate the action steps of DoD Security Technical Implementation Guides (STIGs) for operating systems, middleware, and application stacks in collaboration with the Cybersecurity team.
• Provide rapid response and surge support to additional ATIS systems as needed.
• Implementing, managing, and monitoring cloud-based security tools to ensure compliance, enhance security posture, and automate best practices for threat detection and incident prevention/response.

Required Qualifications:

• Active Secret security clearance.
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent professional experience).
• 6+ years of experience in AWS cloud engineering and automation.
• Demonstrated expertise in the automation of software deployment infrastructure and of software deployment build systems (Git Lab CI, Circle
  
  CI, Jenkins, Cloud Formation, Terraform, etc...)
• Active DoDI 8140 certification/qualification.
• Demonstrated expertise in scripting languages (Power Shell, Python, Bash).
• Experience supporting secure DoD systems with CI/CD and containerization.
• Hands-on experience with DoD RMF, NIST SP 800-53, and STIG compliance in support of government ATO processes.

Preferred Qualifications:

• Prior experience supporting U.S. Army cybersecurity.
• Experience with container orchestration technologies (e.g., Kubernetes, Open Shift) and securing containerized applications.
• Relevant professional…