Senior DevSecOps & Software Engineer

Position Title: Senior DevSecOps & Software Engineer 

Location: Pentagon, Arlington, Virginia 

Category: Funded 

Schedule (FT/PT): Full Time 

Travel Required: May require occasional domestic travel 

Shift: Day 

Remote Type: In-Office 

Clearance required: Current Top Secret. Sensitive Compartmented Information (SCI) eligibility 

Salary: $180,000 - $230,000 

Who is ACT1 Federal? ACT1 Federal LLC is a 100% employee-owned company. We’ve served the Department of War (DoW) for nearly thirty years. Our core missions include weapon systems engineering, logistics, space domain expertise, global defense and security, business and financial management for security assistance and major defense articles, as well as military training and arctic security. Join us!  

Description: ACT1 Federal is seeking an experienced Senior DevSecOps & Software Engineer to provide senior-level software-engineering, DevSecOps, cybersecurity-engineering, and implementation-support services to the Director of Data Management and Performance Assessment, Office of the Deputy Assistant Secretary of the Navy for the Defense Industrial Base (DASN (DIB)). The engineer supports Department of the Navy (DON) efforts to develop, secure, deploy, and sustain software applications and analytic tools used to assess the defense industrial base, including industrial capacity, supply-chain risk, investment activity, performance, and program outcomes. 

This position requires a senior technical subject matter expert with demonstrated experience delivering secure software applications and DevSecOps capabilities in Department of War, Federal, regulated, or other enterprise-scale environments. The engineer shall be capable of designing, developing, testing, containerizing, securing, and supporting deployment of applications through Government-approved pipelines and authorized environments. 

Responsibilities: 

• Provide software-engineering, DevSecOps, cybersecurity-engineering, platform-engineering, and implementation-support services for DASN (DIB) data-management and performance-assessment initiatives. 

• Design, develop, test, document, maintain, and support deployment of software applications, analytic tools, data services, application programming interfaces, and related components. 

• Develop applications using Python or comparable modern programming languages, frameworks, libraries, and development practices appropriate to Government-approved technical environments. 

• Design and implement secure application architectures, application programming interfaces, data integrations, authentication and authorization mechanisms, error handling, logging, monitoring, and performance-management capabilities. 

• Containerize applications and services; develop container-orchestration configurations; and support deployment through Government-approved development, testing, staging, and production environments. 

• Develop, configure, maintain, document, and improve continuous integration and continuous delivery pipelines, source-code-management practices, artifact-management processes, automated testing, release-management workflows, and deployment automation, as authorized by the Government. 

• Develop infrastructure-as-code artifacts, configuration-management approaches, automation scripts, deployment manifests, and repeatable environment-configuration practices supporting authorized application delivery and sustainment. 

• Support integration with Department of War software factories, enterprise pipelines, cloud services, data platforms, source systems, and other Government-approved technical environments. 

• Support deployment and sustainment of approved analytics, data-engineering, artificial-intelligence, machine-learning, reporting, and business-intelligence applications developed within or provided to DASN (DIB). 

• Provide technical implementation, documentation, remediation, and coordination support for Government-led Risk Management Framework activities. 

• Support implementation and documentation of security controls; secure configuration practices; vulnerability identification and remediation; Security Technical Implementation Guide assessment and remediation; continuous-monitoring activities; and authorization-package development. 

• Prepare technical artifacts supporting Government security-review, assessment, authorization-package, and continuous-monitoring activities, including system descriptions, architecture diagrams, control-implementation narratives, configuration documentation, test evidence, remediation plans, and related work products. 

• Conduct code reviews, automated testing, static and dynamic application-security testing, dependency analysis, container scanning, configuration reviews, and other Government-approved secure-software-development activities. 

• Prepare executive briefings, technical memoranda, implementation plans, architecture diagrams, decision packages, status reports, and risk summaries for senior technical and nontechnical stakeholders. 

• Coordinate technical products