DevSecOps/HBSS Engineer

Overview

CommIT Enterprises, Inc. is seeking a DevSecOps/HBSS Engineer join the team in Charleston, SC-*can also be remote! In this role, the DevSecOps/HBSS Engineer will support secure, automated, and resilient delivery of enterprise systems. This role works closely with software, security, and infrastructure teams to strengthen CI/CD pipelines, enhance cloud and containerized environments, and ensure the reliability of missioncritical platforms. A key responsibility of this role is the operation, administration, and security enforcement of the Host-Based Security System (HBSS)/Endpoint Security Solution (ESS), which plays a central role in protecting endpoints, maintaining compliance, and supporting DoD cybersecurity requirements. The DevSecOps Engineer will ensure that HBSS capabilities remain fully functional, updated, and integrated with broader security and operational workflows.  

Established in 2001, CommIT is a Certified Veteran-Owned Small Business (CVOSB) providing innovative technical engineering and data science services. Our enterprise systems support includes the Department of Defense’s (DoD) GCSS-MC, CAC2S, TBMCS-MC, and the Department of Veteran’s Affairs’ (VA) telehealth communications. We offer acquisition management, systems engineering, Agile software development, cloud management, IT modernization, data analytics, cybersecurity, and training, including leading-edge DevSecOps, automated testing, and mobile application development.

Responsibilities

Your essential job functions will include but may not be limited to-

• Design, implement, and maintain DevSecOps pipelines and automation to support continuous integration, delivery, and monitoring. 
• Collaborate with engineering teams to improve tooling, development workflows, and system security posture.
• Manage, operate, and optimize AWS cloud services including EC2, VPC, Lambda, S3, EFS, ECR/ECS, EKS, Route53, IAM, RDS, CloudTrail, and CloudWatch. 
• Develop and maintain infrastructure-as-code using Terraform. 
• Perform security patching and remediation for NiFi, Fortify, SonarQube, Artifactory, and XRay. 
• Manage and support CI/CD tools such as Jenkins, Git, Jira, Artifactory, XRay, and SonarQube. 
• Develop, deploy, and maintain containerized applications on ECS and EKS. 
• Automate operational tasks using Python, Bash, and DevOps tooling.
• Conduct system testing for security, performance, and availability.
• Troubleshoot incidents, identify root causes, and implement corrective actions. 
• Maintain architecture, configuration, and troubleshooting documentation.
• Implement security controls aligned with DoD and industry standards. Operate and maintain Host-Based Security System (HBSS)/Endpoint Security Solution (ESS) components, including: 
  • McAfee ePO 
  • HIPS
  • DLP
  • Policy creation, compliance monitoring, and audit support
  • Support network security components such as firewalls, F5 BigIP, VPN, DNS, SFTP, and TCP/IPbased services. 

Qualifications

Required Experience and Education:

• Bachelor’s or Master’s degree in Computer Science, Engineering, Mathematics, or related field (or equivalent work experience). 
• 6 years (with Master’s) or 8 years (with Bachelor’s) of relevant DevSecOps, software engineering, cloud engineering, or systems engineering experience. 
• Experience developing and maintaining CI/CD and DevSecOps architectures for enterprise systems. 
• Hands-on experience with AWS cloud platforms, Terraform, and DevSecOps toolchains. 
• Experience patching or remediating NiFi, Fortify, SonarQube, Artifactory, and XRay. 
• Experience administering, configuring, and maintaining HBSS/ESS environments including security policies, compliance reporting, and agent deployment. 

Security and Certification Requirements:

• Secret Clearance with the ability to obtain a T5 
• Security  CE 
• HBSS/ESS Administrator or Analyst certifications, such as: 
  • HBSS 201: McAfee ePO / Endpoint Security Administration 
  • HBSS 301: Advanced HBSS Configuration (or ESS equivalent)
  • Ability to obtain and maintain additional DoD cybersecurity certifications as needed. 

Equal Opportunity Employer:

CommIT Enterprises, Inc. is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law.