DevSecOps Engineer

<div class="content-intro"><h3>About Us</h3> <div> <div>AGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.S. government, defense, and intelligence sectors. Prioritizing innovation and client-focused solutions, we assist major agencies in addressing intricate issues and ensuring a more secure future.</div> </div></div><p>The <strong>DevSecOps Engineer</strong> provides security engineering expertise to Mission Partners, system owners, ISSMs/ISSOs, architects, and software development teams throughout the SDLC. The position integrates cybersecurity requirements and controls directly into Agile development and CI/CD processes, enabling development teams to identify and address security issues earlier in the lifecycle and securely move applications and capabilities from concept through production.</p> <p><strong>Essential Duties and Responsibilities:</strong></p> <ul> <li>Embed cybersecurity engineering into Agile software development and modernization activities.</li> <li>Integrate security requirements and controls throughout the SDLC and CI/CD pipelines.</li> <li>Apply DevSecOps and shift-left security principles to identify and remediate vulnerabilities earlier in development.</li> <li>Implement and support automated security testing within CI/CD workflows.</li> <li>Participate with development teams in requirements discussions, design activities, sprint planning, and other lifecycle events.</li> <li>Translate RMF, NIST SP 800-53, DoD cybersecurity policy, STIGs, SRGs, and related security requirements into actionable development and engineering tasks.</li> <li>Collaborate with developers, architects, system owners, ISSMs, and ISSOs to develop achievable technical security controls before formal assessment.</li> <li>Provide threat-informed security engineering guidance for legacy, modernized, and cloud-native applications.</li> <li>Support secure development involving APIs, microservices, containerized workloads, and other modern application architectures as applicable.</li> <li>Help development teams remediate security vulnerabilities while preserving mission functionality and delivery objectives.</li> <li>Provide engineering recommendations for technical controls such as authentication, encryption, network segmentation, and application security.</li> <li>Communicate security findings, technical risks, recommended remediation, and implementation approaches to technical and Government stakeholders.</li> <li>Manage security-engineering activities across multiple concurrent projects and development sprints.</li> </ul> <p><strong>Required Skills, Qualifications and Experience:</strong></p> <ul> <li>Bachelor’s degree and 10+ years of related experience.</li> <li>DoD 8140 Work Role 652 – Security Architect Certification requirement (must have at least one of the following): CCNP Enterprise, GMON, SecurityX / CASP+, CCSP, CISM, CISSO, CISSP-ISSAP, CISSP-ISSEP, Cloud+, CSSLP, FITSP-D, GCIA, GCSA, GDSA, GICSP, GSEC.</li> <li>Must have and maintain a current DoD Top Secret clearance.</li> <li>Must reside within a commutable distance of Fort Meade, MD or Chambersburg, PA in order to work a hybrid onsite schedule (4 days onsite weekly).</li> <li>Demonstrated experience integrating cybersecurity into Agile SDLC environments.</li> <li>Demonstrated hands-on experience with CI/CD pipelines.</li> <li>Practical experience implementing DevSecOps and shift-left security practices.</li> <li>Experience using automated security testing tools within software development processes.</li> <li>Knowledge of RMF, NIST SP 800-37, and NIST SP 800-53.</li> <li>Knowledge and practical application of DoD STIGs and SRGs.</li> <li>Ability to convert security/compliance requirements into specific technical development tasks and controls.</li> <li>Understanding of modern application architectures and cloud-native development.</li> <li>Ability to collaborate effectively with cybersecurity, engineering, architecture, and software-development teams.</li> <li>Strong written and verbal communication skills.</li> <li>Ability to manage multiple development efforts and sprints in a high-tempo environment.</li> </ul> <p>The projected salary range for this position is $130,000+ annually. Final compensation will be determined based on factors including years of relevant experience, active security clearance level, certifications, technical skillset, contract requirements, and overall qualifications.</p><div class="content-conclusion"><p><strong>At AGE Solutions, we reward performance, invest in growth, and share success.</strong> Our benefits support the whole person, professionally, financially, and personally.</p> <ul> <li><strong>26 Days Paid Leave:</strong> Includes vacation, sick, personal time, and holidays. You choose how to use it.</li> <li><strong>Performance Bonuses:</strong> Performance bonuses are awarded based on individual contributions and company-wide results, aligning recognition with impact.</li> <li><strong>401(k) with Match:</strong> We match 3% of your contributions with immediate vesting.</li> <li><strong>Financial Protection: </strong>Company-paid life insurance up to $300K and options for additional coverage for you and your dependents.</li> <li><strong>Health Benef