DevSecOps Engineer at HUBZone Headquarters Inc – Norfolk, Virginia

DevSecOps Engineer
Location: Norfolk, VA (On-site at NATO HQ SACT)
Employment Type: Full-time, contractor support (contingent upon contract award & customer approval)
Security Clearance: Active/eligible for NATO or National SECRET (or higher)
Openings: 1 opening
Target Base Salary Range: $110,000 - $149,000
Travel: Occasional mission travel as required.
Role Overview
Support NATO HQ SACT by deploying and operating secure, resilient containerized services. You will automate infrastructure, implement CI/CD and observability practices, and embed security and compliance into delivery pipelines for mission-critical workloads.
Key Responsibilities

• Deploy and operate containerized services using orchestration frameworks for scalability and resilience.
• Automate environments using Infrastructure as Code (IaC) and configuration management.
• Design, build, and maintain CI/CD pipelines with automated testing and security validation.
• Deploy and monitor workloads in cloud and hybrid environments (AWS/Azure/GCP/VMware/OpenStack).
• Implement SRE and observability practices (logging, metrics, tracing) to improve reliability.
• Design secure networking and service meshes (TLS, Istio/Linkerd, API gateways).
• Apply zero-trust principles, compliance automation, and modern secrets/IAM controls.

Required Qualifications

• 4+ years with containerization and orchestration (Docker, Kubernetes, OpenShift).
• 4+ years designing and maintaining CI/CD pipelines with automated testing and security checks.
• Experience with IaC tools (Terraform, Ansible, Helm, Pulumi).
• Experience securing workloads in hybrid/public cloud environments.
• Experience with observability/SRE tooling (e.g., Prometheus, Grafana, ELK/Loki, OpenTelemetry).
• Experience with zero-trust, policy-as-code, and secrets management (e.g., OPA/Kyverno, Vault/Key Vault/KMS).
• Citizen of a NATO member nation; active or eligible for NATO/National SECRET (or higher) clearance; fluent English.

Preferred / Nice-to-Have

• Experience supporting high-throughput service-oriented architectures.
• Familiarity with supply-chain security practices (SBOM, CIS benchmarks, SLSA).
• Experience working within international or defense security governance.

How to Apply
Email your resume to jobs@idw.inc with the subject line: "RFP-ACT-SACT-26-02 – LC12 – DevSecOps Engineer" or respond to this job posting via the included web application.

Ironclad Defense Works is an Equal Opportunity Employer.