DevSecOps Project Lead (Sr DevSecOps Engineer)

ABOUT DEFCON AI

RESILIENCE IN THE FACE OF DISRUPTION. DEFCON AI is an insights company that leverages artificial intelligence, mathematical optimization, data analytics, and software engineering for resilient optimization of complex systems.
In today’s dynamically changing world, DEFCON AI’s technology aligns outcomes with operational goals, better decision making, and empowers customers to anticipate assess, and mitigate the impacts of disruptions.

This is a rare opportunity to build a production deployment pipeline for mission-critical DoW software from the ground up. 

As the DevSecOps Project Lead, you will own the end-to-end software delivery lifecycle—from code intake through secure, scalable production deployment. Your charter is simple but high-stakes: ensure that software can be deployed reliably, securely, and on mission timelines in DoW environments. 

You will design and operate the DevSecOps pipeline, define the hosting architecture, and integrate security and compliance directly into delivery. This role spans both modern commercial DevOps practices and the realities of DoW deployment (IL-5 today with a path to IL-6), requiring you to make critical decisions across government networks, cloud environments, and hybrid architectures. 

This is a senior role combining hands-on execution with system-level ownership. You will build key components directly while guiding the transition from an existing government-furnished environment to a scalable, long-term production system. 

Key Responsibilities 

Hosting Architecture & Production Environment 

• Design and scale hosting architecture in IL-5 environments with a path to IL-6
• Evaluate and select deployment strategies across government networks, GovCloud, and hybrid platforms
• Build a production environment that supports zero-downtime deployments and enterprise-scale growth 

DevSecOps Pipeline Ownership 

• Design, build, and operate a modern CI/CD pipeline with integrated testing, security scanning, and compliance validation
• Establish and manage development, staging, and production environments
• Ensure alignment with DoW requirements (e.g., Iron Bank, STIGs, ACAS/OpenSCAP, FIPS) 

Transition & System Consolidation 

• Lead transition from incumbent contractor and government-furnished environments
• Inventory, assess, and rationalize existing services, dependencies, and infrastructure
• Simplify and consolidate architecture into a scalable, maintainable system 

Release Management & Delivery Performance 

• Own release cadence from capability intake through production deployment
• Ensure deployment quality through monitoring, rollback readiness, and performance metrics (e.g., uptime, failure rates)
• Support continuous delivery aligned with government timelines and operational needs 

Security Integration & ATO Readiness 

• Partner with Platform Security and RMF leadership to align on ATO strategy
• Ensure the pipeline generates required artifacts for authorization and continuous compliance
• Embed security and compliance into the delivery lifecycle—not as a post-deployment step 

Required Qualifications 

• 8+ years of DevOps/DevSecOps engineering experience, including at least one production pipeline owned end-to-end at scale
• 5+ years experience operating in DoW cloud environments (Azure Gov IL-5, AWS GovCloud, or equivalent IL-5 authorized environment). Working knowledge of DoW impact-level boundaries and the CC SRG.3
• Hands-on experience managing at least one complete ATO or cATO pathway in production.
• US Citizenship Required
• Active Secret Clearance (TS/SCI preferred)
• Willingness to travel up to 25% to USMC sites, Defcon AI HQ, and industry vendor facilities as required 

Preferred Qualifications

• Active TS/SCI Clearance
• Experience supporting USMC or similar Service environments ]
• Experience transitioning systems from one contractor to another
• Experience with Iron Bank container certification
• Familiarity with platforms such as Second Front (Game Warden), Stormbreaker, or Black Pearl
• Exposure to Palantir Foundry or Anduril Lattice environment 

What Success Looks Like 

• A reliable, repeatable production deployment pipeline operating with a predictable cadence
• A clear, effective deployment strategy across both government and industry environments
• Seamless transition from incumbent systems with no disruption to mission capability
• ATO and compliance requirements integrated directly into the pipeline
• Infrastructure and deployment bottlenecks resolved to support enterprise-scale operations 

• Managing and administering your application throughout the hiring process; 
• Verifying the accuracy and authenticity of application materials, including by cross-referencing information you provide against publicly available sources and proprietary databases; 
• Identifying indicators of potentially fraudulent, fabricated, or materially misleading application content, including but not limited to discrepancies between submitted materials and publicly available professional profiles, geographic anomalies, and fabricated work histories.