DevSecOps Engineer - Government

DevSecOps Engineer on Applied Intuition's government work who owns secure code integration from source to deployment, including into classified and air-gapped customer systems. The engineer builds hardened CI/CD pipelines, tunes and consolidates SAST, DAST, SCA, secrets, container and IaC scanning, sets promotion gates with severity thresholds and a documented exception path, automates hardening and assessor-ready evidence with policy-as-code, builds preventive and detective controls in AWS GovCloud, adds SBOMs, artifact signing and admission control, leads threat modelling, and maps controls to NIST and DISA requirements and CMMC with the ISSM.

Applied wants five or more years across software, DevOps, platform or security engineering, Security+, and CI/CD, Kubernetes, infrastructure as code and AWS experience. U.S. citizenship and an obtainable Secret or higher clearance are required, with about 10 percent travel.