Senior Software Engineer

DSD Laboratories, Inc. is committed to delivering innovative solutions in cloud migration and security. They are seeking a mid-to-senior-level DevSecOps Engineer to help migrate mission systems and applications to U.S. Government cloud environments, ensuring security and compliance throughout the migration process.

Responsibilities:

• Migration execution: Plan and execute the migration of on-premise applications, databases, and infrastructure to Azure Government and AWS GovCloud (US) using rehost, replatform, and refactor strategies
• Infrastructure as Code: Build and maintain infrastructure using Terraform, ARM/Bicep, and/or AWS CloudFormation to provision repeatable, auditable, and version-controlled cloud environments
• CI/CD pipelines: Design, implement, and maintain secure CI/CD pipelines (e.g., Azure DevOps, GitLab CI, GitHub Actions, Jenkins) with integrated security scanning and automated testing
• Security automation: Integrate SAST, DAST, SCA, secrets scanning, and container image scanning into pipelines; remediate findings and enforce security gates
• Compliance & hardening: Apply DISA STIGs, CIS Benchmarks, and NIST 800-53 controls; support FedRAMP, FISMA, and Authority to Operate (ATO) processes and continuous monitoring (ConMon)
• Containers & orchestration: Containerize legacy and modern workloads and deploy to Kubernetes (AKS/EKS) or equivalent, with secure configuration and image supply-chain controls
• Identity & access: Implement least-privilege access using IAM, Azure AD/Entra ID, RBAC, and secrets management (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault)
• Observability: Stand up monitoring, logging, and alerting (CloudWatch, Azure Monitor, ELK, Splunk, Prometheus/Grafana) to support operations and security incident response
• Networking & connectivity: Configure secure landing zones, VPCs/VNets, transit connectivity, firewalls, and hybrid links (ExpressRoute, Direct Connect, VPN) during phased migration
• Documentation & collaboration: Produce runbooks, migration plans, and architecture diagrams; collaborate with ISSOs, application owners, and program stakeholders

Requirements:

• 5 + years of combined DevOps, cloud engineering, or systems engineering experience, with hands-on DevSecOps responsibilities
• Demonstrated experience migrating workloads from on-premise environments to public cloud
• Hands-on experience with at least one government cloud region — Azure Government, Google, Oracle, or AWS GovCloud (US) — and working knowledge of the others
• Proficiency with Infrastructure as Code (Terraform, Bicep/ARM, or CloudFormation)
• Experience building and securing CI/CD pipelines and integrating automated security scanning
• Strong scripting/automation skills (Python, Bash, PowerShell)
• Working knowledge of containerization (Docker) and orchestration (Kubernetes)
• Familiarity with federal security frameworks: NIST 800-53, FedRAMP, FISMA, DISA STIGs, and the ATO lifecycle
• Active U.S. Government security clearance and U.S. Citizenship (required)
• Relevant certifications such as AWS Certified DevOps Engineer / Solutions Architect, Microsoft Azure DevOps Engineer Expert / Azure Administrator, Certified Kubernetes Administrator (CKA), or HashiCorp Terraform Associate
• Experience with continuous monitoring tooling and POA&M management
• Experience with zero-trust architecture principles in a federal context
• Prior experience supporting DoD, Intelligence Community, or civilian federal agency programs
• Experience with service mesh, policy-as-code (OPA/Sentinel), and supply-chain security (SBOM, Sigstore)