Compliance Engineer

Overview

DecisionPoint is looking for a Compliance Engineer to join our Cloud Operations team. This team maintains AWS cloud environments, supports a DevSecOps platform, and deploys applications for the Small Application Support team. It also maintains the ARTRANS Cloud Services cloud environments and DevSecOps ecosystem.

In this role, you will be responsible for designing, implementing, and maintaining continuous integration and continuous delivery (CI/CD) pipeline security policies using GitLab and ArgoCD. The ideal candidate will have a background in DevOps principles, automation, and an understanding of GitOps workflows.

Come join our team as a Compliance Engineer on the UNITED STATES TRANSPORTATION COMMAND MILITARY SURFACE DEPLOYMENT AND DISTRIBUTION COMMAND (SDDC) IT Support Services contract!

This position is 100% remote and requires an active Secret clearance.

Duties & Responsibilities

• Design, build, and maintain scalable and secure CI/CD pipelines in GitLab; from code commit to production deployment.
• Implement and manage GitOps workflows for continuous delivery to RKE2 clusters using ArgoCD, ensuring the cluster state always reflects the Git repository.
• Develop and maintain automation scripts and tools to streamline the software development lifecycle, reduce manual intervention, and improve developer productivity.
• Integrate security best practices and automated testing (SAST, DAST, dependency scanning) into the CI/CD pipelines to ensure code quality and security compliance.
• Collaborate with the infrastructure team to manage and provision environments using IaC principles and tools like Terraform.
• Act as a subject matter expert on CI/CD, providing guidance and support to development teams on best practices for building, testing, and deploying their applications.
• Perform updates to an AWS development environment that includes GitLab and various AWS services

Other Tasks:

• Develops Gitlab projects that enable software delivery, security scanning, secrets management, policy-as-code, and compliance automation
• Maintain and update application secrets
• Maintain SSL certificates for application software.

Qualifications

• Active Secret clearance.
• A minimum of 4 years’ experience in creating GitLab security policy
• Expert-level knowledge of Git, including branching strategies and workflows
• Proven experience implementing and managing GitOps with ArgoCD.
• Understanding of containerization (Docker) and Kubernetes orchestration
• Proficiency in scripting languages such as Bash, Python, or Go
• Experience with Infrastructure as Code (IaC), particularly Terraform
• DOD 8140 certification: IAT Level II or better (e.g., Security CE)

Our Equal Employment Opportunity Policy

• EEO and Affirmative Action Policy: DecisionPoint Corporation is an Equal Employment Opportunity and Affirmative Action employer. It is the policy of DecisionPoint Corporation to provide equal employment opportunity in accordance with all applicable Equal Employment Opportunity/Affirmative Action laws, directives and regulations to all employees and qualified applicants without regard to race, ethnicity, color, religion, national origin, sex, age, disability status, pregnancy, sexual orientation, gender identity, genetic information, protected veteran status, or any other protected status under Federal, State or Local laws.
• Pay Transparency Policy: In accordance with Presidential Executive Order 13665, DecisionPoint Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information.
• Authorization to Share Resume and Personal Information: By expressing your interest and submitting your resume for this position, you authorize DecisionPoint Corporation to share your resume, as well as personal information included on the resume, with its subsidiaries, affiliates and teaming partners for the purpose of considering you for this position and other available positions requiring comparable skills, education and experience. Should DecisionPoint Corporation. or its affiliates and teaming partners wish to initiate pre-employment discussions, you will be asked to complete an employment application and related employment documents.