DevSecOps Engineer

***Active TS clearance required; must be eligible for CI Polygraph. Applicants without an active TS clearance will not be considered.. ***

North Point Technology is looking to hire a DevSecOps Engineer to manage application deployments and maintain the CI/CD pipelines and cloud infrastructure that keep mission systems running. The qualified candidate must have an active TS/SCI security clearance and will operate in a DoD/IC (NGA) environment, owning deployments across multiple environments, shepherding changes through formal approval gates, and maintaining a strong security and compliance posture. The ideal candidate pairs hands-on AWS and containerization skills with a disciplined approach to change management and release reliability.

Responsibilities:

This position centers on managing application deployments across multiple environments, including deploying code updates, troubleshooting deployment failures, and executing environment-specific configurations. The engineer will own the Change Management (CHG) process for production deployments - preparing and submitting change requests, shepherding them through ISO, TESR, and Outage Board approval gates, and coordinating deployment windows with stakeholders. Additional duties include maintaining the security and compliance posture by managing XACTA documentation, ensuring TESR approval requirements are met, and enforcing enterprise log retention policies aligned with National Security Systems (NSS) requirements. Day to day, the engineer will operate and maintain the CI/CD pipelines and supporting infrastructure, including GitLab CI configurations.

Required Skills/Experience::

• DevSecOps or Site Reliability Engineering experience in a cloud environment (AWS preferred)
• Hands-on CI/CD pipeline management (GitLab CI preferred)
• Containerized deployments using ECS, Docker, and container orchestration
• AWS infrastructure services such as Lambda, RDS, VPC, CloudWatch, SSM Parameter Store, and S3
• Change management and security accreditation processes in a DoD/IC environment (CHG submissions, RMF, XACTA)
• Infrastructure as Code (IaC) principles and rollback procedures

Preferred Skills/Experience:

• EKS (Kubernetes) migrations or hybrid ECS/EKS environments
• NGA enterprise requirements for National Security Systems (NSS), including log retention and compliance standards
• MCP server deployment
• Node.js and TypeScript ecosystem (Lambda runtimes, dependency management, and layer packaging)
• AWS certifications such as Solutions Architect, DevOps Engineer, or Security Specialty