What are the responsibilities and job description for the DevSecOps Engineer position at MANTECH?
MANTECH seeks motivated, career, and customer-oriented DevSecOps Engineer for a new initiative within the National Capital Region. This effort supports the rapid design, deployment, operation, and sustainment of enterprise-scale AI, data, and mission platform capabilities across cloud, edge, and classified operational environment.
This role supports mission analytics, AI-enabled workflows, predictive analytics, and operational intelligence applications. You will translate raw data into actionable insights, focusing on data science solutions for the mission.
Responsibilities Include But Are Not Limited To
This role supports mission analytics, AI-enabled workflows, predictive analytics, and operational intelligence applications. You will translate raw data into actionable insights, focusing on data science solutions for the mission.
Responsibilities Include But Are Not Limited To
- Implement and automate secure Continuous Integration/Continuous Delivery (CI/CD) pipelines.
- Enforce container security best practices and perform security scanning using tools like Trivy, Grype, or Semgrep.
- Automate compliance pipelines and support continuous monitoring requirements.
- Ensure software supply chain integrity by generating Software Bill of Materials (SBOM) and utilizing tools like Cosign.
- Apply Kubernetes hardening best practices and manage deployments using ArgoCD or OpenShift.
- Bachelor’s degree in Computer Science, Cyber Security, or a related engineering field.
- 5 or more years of experience in DevSecOps, CI/CD, or software supply chain security.
- Expertise in secure containerization and orchestration (Kubernetes).
- Demonstrated experience with security scanning and compliance automation tools (e.g., GitLab CI/CD, OpenSCAP).
- Experience working within government ATO/compliance frameworks (e.g., RMF, Azure TS Network).
- Hands-on experience with specific tools like Trivy, Grype, Semgrep, Cosign, or OpenSCAP.
- Experience developing and managing ATO packages for DoD/IC systems.
- Relevant DevSecOps or Security professional certifications.
- For onsite work, a TS/SCI clearance with Poly will be required.
- The person in this position must be able to remain in a stationary position 50% of the time.
- Frequently communicates with co-workers, management, and customers, which may involve delivering presentations.
- Constantly operates a computer and other office productivity machinery.