{"id":3112237,"url":"https://alion.io/job/ironmountain-solutions-lead-devsecops-engineer-and-application-administrator","title":"Lead DevSecOps Engineer and Application Administrator","company":{"id":678486,"name":"IronMountain Solutions","domain":"ironmountainsolutions.com","url":"https://alion.io/company/ironmountainsolutions","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"C","score":63,"open_postings":26,"ghost_share":0.615,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":52,"computed_at":"2026-10-24T06:02:35Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Huntsville, United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":77000,"max_usd":150000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":98},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Docker","optional":false},{"name":"ElasticSearch","optional":false},{"name":"Fortify","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"GitOps","optional":false},{"name":"Jenkins","optional":false},{"name":"Keycloak","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"OpenShift","optional":false},{"name":"PKI","optional":false},{"name":"Podman","optional":false},{"name":"PostgreSQL","optional":false},{"name":"Prisma Cloud","optional":false},{"name":"SonarQube","optional":false},{"name":"SBOM","optional":true}],"status":"live","first_seen_at":"2026-10-22T20:31:55Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-24T12:29:41Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":1},"description":"501747 Lead DevSecOps Engineer & Application Administrator (CATENA Dashboard)\nWork Location: Huntsville, AL\nSchedule: Full-time 40 hrs. per week, 8 hours per day (remote work is not authorized).\nRelocation: Negotiable\nIronMountain Solutions is seeking a highly skilled, mission-focused Lead DevSecOps Engineer & Application Administrator to serve as the primary technical point of contact for CATENA (Critical Asset Tracking & Enterprise Node Analysis), a mission-critical supply chain risk management dashboard.\nIn this role, you will hold end-to-end technical ownership of the CATENA platform-from implementing new capabilities and maintaining codebase health to coordinating deployment operations within the Artificial Intelligence Integration Center (AI2C) hosting environment. You will champion the application's cybersecurity posture, managing vulnerability remediation, enforcing Army-approved identity/access workflows, orchestrating continuous security scanning, and ensuring rigorous data protection and disaster recovery verification.\nKey Responsibilities\n1. Dashboard Development & Codebase Stewardship\nServe as the principal technical authority and point person for the CATENA dashboard.\nDesign, build, and deploy enhancements, integrating new functional modules and refining existing features based on stakeholder feedback.\nMaintain clean, documented, and version-controlled application codebases across all environments using modern CI/CD pipelines.\nEnsure application performance, responsiveness, high availability, and seamless data visualization for supply chain risk intelligence.\n2. Environment Hosting & AI2C Collaboration\nServe as the primary technical liaison to the Artificial Intelligence Integration Center (AI2C) platform and infrastructure teams.\nCoordinate deployment, scaling, containerization, and configuration of CATENA within the AI2C enterprise hosting infrastructure.\nAlign development sprints with AI2C platform maintenance windows, runtime prerequisites, and infrastructure governance policies.\n3. Cybersecurity, Vulnerability Management & Compliance\nConduct continuous static and dynamic security assessments (SAST/DAST/container scanning) across CATENA code and infrastructure.\nTriage, prioritize, and remediate discovered security vulnerabilities; apply all necessary security patches and dependency updates within mandated timeframes.\nImmediately report detected security incidents, anomalous system behavior, or emerging threats to the Information System Security Manager (ISSM) and the AI2C Platform Team.\nAuthor and maintain formal Plan of Action and Milestones (POA&M) documentation for any findings or vulnerabilities that cannot be resolved within standard remediation windows.\nSupport ongoing Risk Management Framework (RMF) and Authority to Operate (ATO) activities for the dashboard.\n4. Identity, Credential, and Access Management (ICAM)\nConfigure all hosted frontend applications and backend components to enforce Army-approved Multi-Factor Authentication (MFA) via Single Sign-On (SSO) for all interactive user and administrative sessions.\nIntegrate identity and authentication workflows directly with the platform's centralized Keycloak service or an authorized, platform-approved alternative Identity Provider (IdP).\nImplement granular Role-Based Access Control (RBAC) to ensure strict adherence to the principle of least privilege.\n5. Data Integrity, Backup, and Disaster Recovery\nArchitect, implement, and maintain comprehensive backup and restore procedures for all CATENA application data, configurations, and persistent storage.\nConduct monthly recovery drills and verification tests to validate restore viability, minimizing potential recovery time objectives (RTO) and recovery point objectives (RPO).\nMaintain complete documentation and runbooks for business continuity, disaster recovery, and failover scenarios.\nRequired Qualifications\n Education: Bachelor’s degree in Computer Science, Software Engineering, Information Systems, Cybersecurity, or a related technical discipline (or equivalent practical experience).\nExperience: 5+ years of combined experience in software development, application administration, and DevSecOps within enterprise or defense environments.\nIdentity & Authentication:\nHands-on experience integrating applications with Keycloak, OAuth 2.0, OpenID Connect (OIDC), or SAML 2.0.\nExperience implementing DoD/Army-compliant PKI, CAC/PIV-based MFA, and SSO architectures.\n Security & Compliance:\nDemonstrated familiarity with DoD RMF, NIST SP 800-53, DISA STIGs, and vulnerability scanning/management tools (e.g., SonarQube, Fortify, Anchore, Prisma Cloud, or ACAS/Tenable).\nDirect experience authoring and managing Plan of Action and Milestones (POA&M)\nExperience interfacing directly with an ISSM / ISSO.\n DevSecOps & Hosting:\nProficiency in container technologies (Docker, Podman) and orchestration (Kubernetes, Red Hat OpenShift).\nWorking knowledge of modern GitOps, CI/CD pipeline automation (GitLab CI, GitHub Actions, or Jenkins).\n Data Management:\nExperience managing database backends (e.g., PostgreSQL, Elasticsearch, MongoDB) along with automated backup scripts, snapshots, and recovery verification routines.\nPreferred Qualifications\nPrior experience collaborating with or deploying solutions onto AI2C or Army enterprise cloud environments (e.g., cARMY).\nActive DoD 8570/8140 IAT Level II or III certification (e.g., Security+ CE, CySA+, CASP+, CISSP).\nFamiliarity with supply chain risk management (SCRM), bill of materials (SBOM) analysis, or logistics analytics.\nActive Secret or higher security clearance.\nKey Performance Indicators (KPIs)\nSystem Availability: Maintenance of high operational uptime within the AI2C runtime environment.\nPatch Timeliness: 100% adherence to established vulnerability mitigation timelines or immediate POA&M submission.\nAudit Readiness: Full traceability and zero unapproved exceptions in Keycloak SSO/MFA configurations and monthly backup verification logs.\n Stakeholder Alignment: High responsiveness and proactive communication with the ISSM, AI2C engineering teams, and executive stakeholders.","description_format":"text","description_chars":6133,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":true,"industries":["DevSecOps","Military Logistics","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-10-22T21:15:25Z"}],"visa":[],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.602,"p_room":1,"age_days":1,"expected_fill_days":52,"reasons":["conf:2","stale_co","win:early"],"computed_at":"2026-10-24T06:02:35Z"},"pay":null,"html_url":"https://alion.io/job/ironmountain-solutions-lead-devsecops-engineer-and-application-administrator","json_url":"https://alion.io/job/ironmountain-solutions-lead-devsecops-engineer-and-application-administrator.json","meta":{"generated_at":"2026-10-24T14:44:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20838,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":678486},"rest":"https://alion.io/mcp/rest/get_company?id=678486"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fironmountain-solutions-lead-devsecops-engineer-and-application-administrator"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fironmountain-solutions-lead-devsecops-engineer-and-application-administrator"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fironmountain-solutions-lead-devsecops-engineer-and-application-administrator"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ironmountain-solutions-lead-devsecops-engineer-and-application-administrator\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fironmountain-solutions-lead-devsecops-engineer-and-application-administrator"}]}