DevSecOps Engineer
Location:
Norfolk, VA (On-site at NATO HQ SACT)
Employment Type:
Full-time, contractor support (contingent upon contract award & customer approval)
Security Clearance:
Active/eligible for NATO or National SECRET (or higher)
Openings: 1 openingTarget Base Salary Range: $110,000 - $149,000
Travel:
Occasional mission travel as required.
Role Overview
Support NATO HQ SACT by deploying and operating secure, resilient containerized services. You will automate infrastructure, implement CI/CD and observability practices, and embed security and compliance into delivery pipelines for mission-critical workloads.
Key Responsibilities
- Deploy and operate containerized services using orchestration frameworks for scalability and resilience.
- Automate environments using Infrastructure as Code (IaC) and configuration management.
- Design, build, and maintain CI/CD pipelines with automated testing and security validation.
- Deploy and monitor workloads in cloud and hybrid environments (AWS/Azure/GCP/VMware/OpenStack).
- Implement SRE and observability practices (logging, metrics, tracing) to improve reliability.
- Design secure networking and service meshes (TLS, Istio/Linkerd, API gateways).
- Apply zero-trust principles, compliance automation, and modern secrets/IAM controls.
Required Qualifications
- 4+ years with containerization and orchestration (Docker, Kubernetes, OpenShift).
- 4+ years designing and maintaining CI/CD pipelines with automated testing and security checks.
- Experience with IaC tools (Terraform, Ansible, Helm, Pulumi).
- Experience securing workloads in hybrid/public cloud environments.
- Experience with observability/SRE tooling (e.g., Prometheus, Grafana, ELK/Loki, OpenTelemetry).
- Experience with zero-trust, policy-as-code, and secrets management (e.g., OPA/Kyverno, Vault/Key Vault/KMS).
- Citizen of a NATO member nation; active or eligible for NATO/National SECRET (or higher) clearance; fluent English.
Preferred / Nice-to-Have
- Experience supporting high-throughput service-oriented architectures.
- Familiarity with supply-chain security practices (SBOM, CIS benchmarks, SLSA).
- Experience working within international or defense security governance.
How to Apply
Email your resume to [email protected] with the subject line: "RFP-ACT-SACT-26-02 – LC12 – DevSecOps Engineer" or respond to this job posting via the included web application.Ironclad Defense Works is an Equal Opportunity Employer.
