{"id":2144955,"url":"https://alion.io/job/oshkoshcorp-devsecops-engineer-experienced","title":"DevSecOps Engineer-Experienced","company":{"id":1840676,"name":"Oshkosh Corporation","domain":"oshkoshcorp.com","url":"https://alion.io/company/oshkoshcorp","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New Hudson, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":79300,"max":126900,"currency":"USD","period":"year","gross":null,"usd_annual":126900},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Amazon EC2","optional":false},{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"AWS Lambda","optional":false},{"name":"Azure","optional":false},{"name":"Azure Cosmos DB","optional":false},{"name":"Azure DevOps","optional":false},{"name":"CI/CD","optional":false},{"name":"DNS","optional":false},{"name":"Docker","optional":false},{"name":"GitLab","optional":false},{"name":"Jaeger","optional":false},{"name":"Jenkins","optional":false},{"name":"Jira","optional":false},{"name":"Kibana","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"NIST 800-171","optional":false},{"name":"OpenTelemetry","optional":false},{"name":"Prometheus","optional":false},{"name":"SBOM","optional":false},{"name":"Splunk","optional":false},{"name":"TCP/IP","optional":false},{"name":"Terraform","optional":false},{"name":"VLAN","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-09-30T00:00:00Z","employer_posted_date":"2026-09-30","last_verified_at":"2026-10-17T20:43:03Z","board_verified":true,"closed_at":null,"days_open":18,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":18},"description":"About Pratt Miller, an Oshkosh company\nPratt Miller is a product development company in motorsports, defense, and mobility industries providing clients with product engineering and low-volume production solutions. Our range of research & development, engineering, prototype manufacturing, test & validation, and low-rate production capability help our customers bring their high-quality products to market faster.\nThe DevSecOps Engineer is responsible for implementing secure development pipelines, automation frameworks, and compliant infrastructure to support defense programs operating under CMMC Level 2 and NIST 800-171/172 requirements. This role integrates security controls into cloud and on-prem environments, supports continuous monitoring and vulnerability management, and ensures systems hosting Controlled Unclassified Information (CUI) meet mission-critical performance and cybersecurity standards. This is a hands-on position that will work closely with software, IT, and security teams to deliver resilient, secure, and auditable solutions across defense projects.\nESSENTIAL FUNCTIONS AND SKILLS\nTypical responsibilities include, but are not limited to:\nProject Execution\nResponsible for the design, implementation, and maintenance of secure DevSecOps infrastructure and delivery pipelines to support defense programs under CMMC Level 2 compliance.\nImplement security controls and automation within CI/CD pipelines using GitLab and related DevSecOps tooling.\nEnsure adherence to secure coding practices, compliance with NIST SP 800-171/172, and CMMC Level 2 cybersecurity standards across software development and infrastructure management.\nCollaborate with defense software and cybersecurity teams to integrate automated testing, vulnerability management, and secure deployment strategies into cloud and on-prem environments.\nAssist in identifying technologies and tools that enhance security posture, automation, and compliance monitoring capabilities.\nCustomer Focus\nMaintain a customer-focused view of system security and DevSecOps process effectiveness across defense project initiatives.\nParticipate in technical and compliance reviews with customers and stakeholders to ensure systems meet mission-critical availability, reliability, and security requirements.\nResearch\nResearch and implement new technologies, security tools, and methodologies to enhance automation, compliance, and system resilience.\nStay informed on evolving DoD cybersecurity standards, cloud governance models, and zero-trust architectures to ensure continuous compliance.\nCollaboration\nWork across multidisciplinary engineering and IT teams, integrating security controls within development and operational environments.\nCollaborate with network, software, and security engineers to ensure end-to-end protection of systems hosting Controlled Unclassified Information (CUI).\nParticipate in design and code reviews, infrastructure planning meetings, and post-implementation security assessments.\nWork effectively with remote and hybrid teams using collaboration tools such as MatterMost and GitLab.\nProblem Solving\nDemonstrate strong analytical thinking and problem-solving skills with the ability to address complex infrastructure and cybersecurity challenges.\nLeverage automation and monitoring to proactively identify and resolve performance or compliance issues within DevSecOps pipelines.\nADDITIONAL REQUIREMENTS\nStrong documentation skills for configurations, compliance evidence, and SOPs.\nAbility to clearly explain complex security concepts to both technical and non-technical audiences.\nSelf-starter with a security-first mindset and the ability to manage multiple projects with minimal supervision.\nCollaborative and communicative, with consistent effectiveness working across disciplines.\nEDUCATION / CERTIFICATION / YEARS OF EXPERIENCE\nBachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field; advanced degree preferred.\nMust meet the requirements for obtaining a U.S. Government clearance; active Secret or higher clearance preferred.\nExperience developing and maintaining secure CI/CD pipelines using GitLab, Jenkins, or Azure DevOps.\nExperience implementing automated security testing tools (SAST, DAST, SCA) and vulnerability management systems.\nExperience with CMMC Level 2 or NIST 800-171 compliance in defense or government environments.\nExperience managing secure infrastructure in AWS GovCloud, Azure Government, or on-prem DoD-accredited environments.\nDESIRED SPECIALIZED SKILLS AND KNOWLEDGE\nTechnical Expertise\nDeep understanding of DevSecOps principles, CI/CD, and automation frameworks.\nExpertise in network architecture and security (TCP/IP, VLANs, VPNs, firewalls, IDS/IPS systems).\nActive Directory and Group Policy administration for secure identity and access management.\nExperience implementing zero-trust and least-privilege access models.\nKnowledge of cloud security configurations, infrastructure-as-code (Terraform, Ansible), and container orchestration (Docker, Kubernetes).\nFamiliarity with CMMC Level 2, DFARS 252.204-7012, and DoD cybersecurity frameworks.\nTools and Technologies\n Networking/Infrastructure/Security: TCP/IP, VLAN, VPN, DNS, zero-trust networking; firewalls; IDS/IPS; endpoint protection; Active Directory/Azure AD; log aggregation and monitoring (Prometheus, Kibana, Splunk, Jaeger).\nDevSecOps / Automation Tools: GitLab, Jenkins, Azure DevOps, Nexus, Ansible, Terraform; Docker and Kubernetes; SAST/DAST/fuzz testing/SBOM tools; OpenTelemetry; Prometheus; collaboration tools including MatterMost and Jira/Atlassian.\n Cloud Platforms: AWS GovCloud (EC2, Lambda, Route 53, ECR, CloudTrail); Azure Government (Virtual Machines, IoT Hub, Functions, CosmosDB, Azure Security Center).\nWORK ENVIRONMENT & EXPECTATIONS\nStandard daytime schedule Monday-Friday, with flexibility for surge requirements or deadline-driven tasks.\nThis is an on-site position in New Hudson, MI.\nSome travel for customer engagement, system integration, or compliance activities.\nPay Range:\n$79,300.00 - $126,900.00The above pay range reflects the minimum and maximum target pay for the position across all U.S. locations. Within this range, individual pay is determined by various factors, including the scope and responsibilities of the role, the candidate's experience, education and skills, as well as the equity of pay among team members in similar positions. Beyond offering a competitive total rewards package, we prioritize a people-first culture and offer various opportunities to support team member growth and success.\nOshkosh is committed to working with and offering reasonable accommodations to job applicants with disabilities. If you need assistance or an accommodation due to a disability for any part of the recruitment process, please contact our talent acquisition team by email .\nOshkosh Corporation is a merit-based Equal Opportunity Employer. Job opportunities are open for application to all qualified individuals and selection decisions are made without regard to race, color, religion, sex, national origin, age, disability, veteran status, or other protected characteristic. To the extent that information is provided or collected regarding categories as provided by law it will in no way affect the decision regarding an employment application.\nOshkosh Corporation will not discharge or in any manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with Oshkosh Corporation's legal duty to furnish information.\nCertain positions with Oshkosh Corporation require access to controlled goods and technologies subject to the International Traffic in Arms Regulations or the Export Administration Regulations. Applicants for these positions may need to be \"U.S. Persons,\" as defined in these regulations. Generally, a \"U.S. Person\" is a U.S. citizen, lawful permanent resident, or an individual who has been admitted as a refugee or granted asylum.","description_format":"text","description_chars":8584,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-09T04:08:56Z"}],"visa":[],"liveness":{"score":39,"band":"fade","label":"Fading","p_open":1,"p_active":0.711,"p_room":0.55,"age_days":17,"expected_fill_days":16,"reasons":["conf:2","velocity","win:tail","comp:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":126900,"is_top_pay":false},"html_url":"https://alion.io/job/oshkoshcorp-devsecops-engineer-experienced","json_url":"https://alion.io/job/oshkoshcorp-devsecops-engineer-experienced.json","meta":{"generated_at":"2026-10-18T05:15:36Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7948,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1840676},"rest":"https://alion.io/mcp/rest/get_company?id=1840676"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Foshkoshcorp-devsecops-engineer-experienced"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Foshkoshcorp-devsecops-engineer-experienced"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Foshkoshcorp-devsecops-engineer-experienced"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/oshkoshcorp-devsecops-engineer-experienced\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Foshkoshcorp-devsecops-engineer-experienced"}]}