DevSecOps Engineer

Location: Reston, VA

Clearance: Active Secret Clearance Required

Salary Range: $120,000-$166,000 (Based on experience and education)
Join the Future of Data-Driven Decision Making

At Data Machines, we leverage data analytics, DevSecOps, machine intelligence, and data science to engineer innovative solutions for our Federal Government, Department of Defense, and commercial customers. Our teams solve complex, mission-critical challenges using modern cloud technologies, secure software development practices, and advanced engineering solutions.

We are seeking an experienced DevSecOps Engineer to secure and improve software delivery across the enterprise. This engineering role embeds security, quality, compliance, and software supply-chain controls directly into CI/CD workflows while partnering with software development, cybersecurity, platform engineering, systems engineering, and program teams.

This is a hands-on engineering position focused on building and improving secure software-delivery processes. You will work with Azure DevOps Server, Nexus, SonarQube, Kubernetes/K3s deployment workflows, artifact controls, and secure release patterns to help development teams deliver software securely and reliably.

This position will be performed on-site in Reston, VA. Occasional after-hours or weekend maintenance and emergency response may be required.
Key Responsibilities

• Design, implement, and improve secure CI/CD patterns in Azure DevOps, including reusable YAML templates, quality gates, artifact controls, and release safeguards.
• Support secure release workflows across development, test, integration, staging, and production environments.
• Troubleshoot pipeline failures, permissions issues, dependency problems, scan failures, and release blockers.
• Integrate SAST, SCA, dependency scanning, secrets scanning, code-quality gates, container scanning, and artifact validation into build and release workflows.
• Support Nexus, SonarQube, Azure DevOps artifacts, and related code-quality and artifact-management platforms.
• Partner with cybersecurity teams to align CI/CD controls with SSP, RMF, NIST, CMMC, STIG, Zero Trust, audit, and program requirements.
• Partner with platform engineering teams on Kubernetes/K3s deployment standards covering namespaces, RBAC, service accounts, Helm, ingress, TLS, storage, quotas, and workload security.
• Create documentation, examples, runbooks, and onboarding materials for secure pipeline and deployment workflows.
• Track pipeline health, scan outcomes, release blockers, recurring developer pain points, and control gaps, and convert findings into improved automation and guardrails.
• Support occasional after-hours or weekend maintenance and emergency response when required.

Minimum Qualifications

• Active Secret security clearance.
• S. citizenship required.
• 5+ years of experience in DevOps, DevSecOps, platform engineering, software delivery, systems engineering, or a closely related technical role.
• Hands-on experience with Azure DevOps pipelines, YAML, build and release workflows, repositories, artifacts, permissions, or agent-based builds.
• Experience implementing security, quality, or compliance controls in CI/CD workflows.
• Experience with secure software-delivery practices such as SAST, SCA, secrets handling, code-quality gates, artifact controls, or container scanning.
• Experience troubleshooting CI/CD failures, build issues, deployment problems, permissions issues, or dependency-related errors.
• Experience with Kubernetes, K3s, containers, Helm, or similar deployment technologies.
• Experience scripting or automating with PowerShell, Bash, Python, or similar languages.
• Ability to write clear technical documentation, runbooks, onboarding guides, and troubleshooting procedures.
• Ability to work on-site in Reston, VA in regulated, secure, and compliance-bounded environments.

Preferred Qualifications

• Experience administering Azure DevOps Server.
• Experience integrating or administering Nexus, SonarQube, or similar artifact and code-quality platforms.
• Experience with SBOM generation, SCA, container scanning, artifact signing, provenance, or software supply-chain security.
• Experience with policy as code, OPA/Gatekeeper, Kubernetes admission controls, or secure workload policies.
• Experience with Infrastructure as Code or Configuration as Code using Terraform, Ansible, Bicep, CloudFormation, or similar tools.
• Experience with Prometheus, Grafana, Loki, or similar observability platforms.
• Experience in defense contracting, government programs, CMMC, NIST SP 800-171, RMF, STIGs, or other compliance-driven environments.