Noblis
From Noblis's careers page
Status: listed on the employer's own careers page when we last checked (daily). Confirm on their site before applying.
In this role, you will embed security practices into the DevOps lifecycle, ensuring security is integrated at every stage of software development.
Noblis is looking for a highly experienced DevSecOps Engineer with an active Top Secret/SCI clearance with Polygraph to support critical national security missions.
In this role, you will embed security practices into the DevOps lifecycle, ensuring security is integrated at every stage of software development. You’ll collaborate across development, operations, and security teams to close gaps and promote a culture of shared accountability for security.
The ideal candidate brings hands-on experience designing secure CI/CD pipelines, automating security controls, securing Kubernetes environments, and guiding or mentoring junior engineers.
Designing, building, maintaining, and optimizing CI/CD pipelines supporting automated build, test, security scan, and deployment processes.
Integrating automated testing, security scanning, and compliance validation into pipeline execution to support secure delivery practices.
Developing and managing IaC using Terraform or CloudFormation, implementing security guardrails and scanning to ensure compliance and prevent misconfigurations.
Implementing security best practices for Docker, Kubernetes, and EKS, including image hardening, admission controls, policy-as-code, and runtime security.
Partnering with teams to design and enforce AWS/Azure security guardrails, including IAM least-privilege, network controls, and encryption standards.
Operationalizing vulnerability management by identifying, prioritizing, and remediating security threats across applications and infrastructure.
Translating security compliance requirements into automated security controls and audit-ready evidence.
Ensuring that all software development and deployment processes comply with relevant security policies, standards, and regulations.
Acting as a security champion, mentoring junior engineers and developers on secure coding practices and DevSecOps principles.
Required Qualifications
US Citizenship is required
Active Top-Secret SCI (TS/SCI) with Polygraph
Bachelor’s OR Master's degree with 7 years of related experience; OR associate’s degree with 11 years of related experience; OR High School diploma/GED with 14 years of related experience.
Proficiency in programming languages such as Python, and scripting languages for automation tasks (e.g., Bash).
Familiarity with CI/CD tools (e.g., GitLab CI, GitHub Actions), container orchestration (e.g., Kubernetes, EKS), and infrastructure as code (e.g., Terraform, Ansible).
Skills in security cloud environments, including cloud service providers (e.g., AWS, Azure, GCP), and understanding of cloud-native security tools and practices.
Ability to identify security issues and vulnerabilities and develop effective solutions.
Ability to distill technical complexities into actionable guidance for development teams.
#HighlyCleared
Desired Qualifications
AWS Certification , including AWS Certified DevOps Engineer or AWS Certified Solutions Architect Certification
Knowledge of SBOM generation, artifact signing (cosign), and provenance concepts.
Familiarity with NIST SP 800-171 or CMMC expectations.
Strong analytical skills to diagnose complex security issues spanning multiple technologies.
Overview
Overview
Noblis and our wholly owned subsidiaries, Noblis ESI and Noblis MSD, take on some of the nation’s toughest challenges, delivering advanced solutions to our customers’ most critical missions. We bring together leading scientific, engineering, and management expertise in a culture grounded in objectivity and collaboration, ensuring our work creates lasting impact across federal missions.
We work with a broad range of government agencies in the defense, intelligence, and federal civilian sectors. Learn more and find opportunities at careers.noblis.org
At Noblis, we share a passion for excellence and innovation, and we create an environment where people can do meaningful work while maintaining the balance that keeps them energized and fulfilled. We seek out individuals with a natural curiosity and desire to collaborate and learn. We believe our people are our greatest strength, and we consistently seek exceptionally skilled, mission‑driven professionals who care deeply about doing work that enriches lives and makes our nation safer.
Noblis has earned numerous workplace awards for our culture, our commitment to employee well‑being, and our dedication to meaningful, impactful work. We also maintain a drug‑free workplace.
Remote/hybrid status is subject to change based on Noblis and/or government requirements.
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to race, color, ethnicity, sex, age, national origin, religion, physical or mental disability, pregnancy/childbirth and related medical conditions, veteran or military status, or any other characteristics protected by applicable federal, state, or local law.
If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact us.
EEO is the Law | E-Verify | Right to Work
Total Rewards
At Noblis we recognize and reward your contributions, provide you with growth opportunities, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, and work-life programs. Our award programs acknowledge employees for exceptional performance and superior demonstration of our service standards. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in our benefit programs. Other offerings may be provided for employees not within this category. We encourage you to learn more about our total benefits by visiting the Benefits page on our Careers site.
Compensation at Noblis is determined by various factors, including but not limited to, the combination of education, certifications, knowledge, skills, competencies, and experience, internal and external equity, location, clearance level, as well as contract-specific affordability, organizational requirements and applicable employment laws. The projected compensation range for this position is based on full time status. For part time or on-call staff, compensation is proportionately adjusted based on hours worked. While monetary compensation is important, it's just one component of Noblis’ total compensation package.
Posted Salary Range
USD $120,700.00 - USD $188,725.00 /Yr.
Noblis is looking for a highly experienced DevSecOps Engineer with an active Top Secret/SCI clearance with Polygraph to support critical national security missions.
In this role, you will embed security practices into the DevOps lifecycle, ensuring security is integrated at every stage of software development. You’ll collaborate across development, operations, and security teams to close gaps and promote a culture of shared accountability for security.
The ideal candidate brings hands-on experience designing secure CI/CD pipelines, automating security controls, securing Kubernetes environments, and guiding or mentoring junior engineers.
Designing, building, maintaining, and optimizing CI/CD pipelines supporting automated build, test, security scan, and deployment processes.
Integrating automated testing, security scanning, and compliance validation into pipeline execution to support secure delivery practices.
Developing and managing IaC using Terraform or CloudFormation, implementing security guardrails and scanning to ensure compliance and prevent misconfigurations.
Implementing security best practices for Docker, Kubernetes, and EKS, including image hardening, admission controls, policy-as-code, and runtime security.
Partnering with teams to design and enforce AWS/Azure security guardrails, including IAM least-privilege, network controls, and encryption standards.
Operationalizing vulnerability management by identifying, prioritizing, and remediating security threats across applications and infrastructure.
Translating security compliance requirements into automated security controls and audit-ready evidence.
Ensuring that all software development and deployment processes comply with relevant security policies, standards, and regulations.
Acting as a security champion, mentoring junior engineers and developers on secure coding practices and DevSecOps principles.
US Citizenship is required
Active Top-Secret SCI (TS/SCI) with Polygraph
Bachelor’s OR Master's degree with 7 years of related experience; OR associate’s degree with 11 years of related experience; OR High School diploma/GED with 14 years of related experience.
Proficiency in programming languages such as Python, and scripting languages for automation tasks (e.g., Bash).
Familiarity with CI/CD tools (e.g., GitLab CI, GitHub Actions), container orchestration (e.g., Kubernetes, EKS), and infrastructure as code (e.g., Terraform, Ansible).
Skills in security cloud environments, including cloud service providers (e.g., AWS, Azure, GCP), and understanding of cloud-native security tools and practices.
Ability to identify security issues and vulnerabilities and develop effective solutions.
Ability to distill technical complexities into actionable guidance for development teams.
#HighlyCleared
Scores your resume against this job the way resume scanners do: the job's hard and soft skills, searchability, recruiter tips and formatting.
Create a free account to see your score. Your resume stays in this browser until then, and we never store it.
Already a member? Sign in