JT4, LLC provides engineering and technical support to multiple western test ranges for the U.S. Air Force, Space Force, and Navy under the Joint Range Technical Services Contract, better known as J-Tech II. JT4 develops and maintains realistic, integrated test and training environments and prepares our nation's war-fighting aircraft, weapons systems, and aircrews for today's missions and tomorrow's global challenges.
JOB SUMMARY -- ESSENTIAL/FUNCTIONS DUTIES
A DevSecOps Engineer will manage, design, automate, and secure continuous integration and continuous delivery (CI/CD) pipelines from the group up across on-premises, air-gapped, and secure cloud environments (AWS FENCES). They will create a "Security-as-Code" and developer enablement across our software development networks. Working in close collaboration with a Senior DevSecOps Engineer, Platform/Kubernetes Engineers, System Administrators, Cybersecurity Analysts, and AI Subject Matter Experts, you will build automated security and compliance gates and accelerate secure software delivery across multiple hybrid boundaries.
Employee will be responsible for the following functions/duties:
- CI/CD Pipeline Design & Implementation
- Design, build, test, and maintain robust, end-to-end automated CI/CD pipelines utilizing modern source control and pipeline orchestration platforms (GitHub Actions, and AWS developer tooling such as AWS CodeCommit and AWS CodeDeploy).
- Standardize branching strategies, automated release versioning, artifact staging, and promotion workflows across development, test, and production environments. Implement and configure Sonatype Nexus Repository.
- Partner with software development and engineering teams to troubleshoot build failures, improve deployment velocity, and eliminate developer friction.
- Pipeline Security & Automated Compliance (DevSecOps)
- Embed automated security gates such as Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) into active pipelines.
- Software Bill of Materials (SBOM) generation and open-source dependency analysis.
- Container Image Scanning for base image vulnerabilities, misconfigurations, and compliance issues prior to deployment.
- Enforce automated policy-as-code and configuration validation to ensure software artifacts comply with cybersecurity baselines before deployment.
- Collaborate closely with Cybersecurity Analysts to translate compliance policies into automated pipeline checks.
- Build Infrastructure & Runner Orchestration
- Deploy, scale, and optimize containerized build execution environments, specifically deploying and managing Actions Runner Controller (ARC) for self-hosted GitHub Actions runners on Kubernetes.
- Maintain internal package repositories and manage automated container image builds and promotion to AWS Elastic Container Registry (ECR) and on-premises registries.
- Manage runner autoscaling, caching, and clean execution state to ensure high-performance, reproducible builds.
- Cloud & Hybrid Infrastructure as Code (AWS FENCES)
- Define and provision reproducible pipeline infrastructure using Infrastructure as Code (IaC) (e.g., Terraform, AWS CloudFormation).
- Leverage and configure core AWS services supporting software development and staging: EC2, S3, VPC, IAM, Lambda, Network and Application Load Balancers (NLB/ALB), and AWS Elastic Kubernetes Service (EKS).
- Support secure cross-domain synchronization and artifact transfer between on-premises developer networks and AWS FENCES
- PKI, Secrets & Certificate Operations
- Implement secure secrets management solutions across CI/CD workflows, eliminating plaintext credentials, tokens, and private keys.
- Manage the issuance, rotation, and lifecycle of SSL/TLS certificates across Linux build agents, containerized tools, and webhooks to ensure end-to-end transport encryption.
DESIRED QUALIFICATIONS
- Air-Gapped & Restricted Environments: Experience deploying CI/CD pipelines and developer tooling in disconnected, air-gapped, or DoD IL5/IL6/AWS FENCES environments.
- Automated Runner Architecture: Direct hands-on experience deploying and tuning Actions Runner Controller (ARC) on Kubernetes.
- Security Scanning Toolchains: Experience integrating security scanning tools (e.g., Trivy, Anchore, SonarQube) into automated build gates.
- Kubernetes Familiarity: Experience deploying containerized workloads or Helm charts to Kubernetes environments (e.g., AWS EKS, OpenShift, MicroK8s, or Talos Linux).
- AWS Developer Suite: Direct experience with AWS CodeCommit and AWS CodeDeploy.
- Infrastructure as Code: Proficiency with Terraform, Ansible, or AWS CloudFormation.
The following qualifications are preferred:
- CI/CD & Source Control Mastery: Hands-on experience building and administering CI/CD pipelines using Git, GitHub Actions, or GitLab CI/CD, alongside deep understanding of branching workflows, pull/merge requests, and release management.
- AWS Cloud Services: Practical experience or exposure to foundational AWS infrastructure services: EC2, S3, VPC, IAM, Lambda, and ALB/NLB, as well as container services like AWS ECR.
- Automation & Scripting: Strong programming or scripting capability in Bash, Python, or PowerShell for pipeline automation, webhook integrations, and systems administration tasks.
- Linux Fundamentals: Strong Linux command-line interface (CLI) proficiency, shell scripting, package management, and system configuration.
- PKI & Encryption: Practical experience configuring, installing, and troubleshooting SSL/TLS certificates in Linux environments and containerized applications.
- Container Fundamentals: Working knowledge of Docker/container packaging, Dockerfiles, and image lifecycle management.
• CompTIA Security +
REQUIREMENTS -- EDUCATION, TECHNICAL, AND WORK EXPERIENCE
One of the following educational requirements must be met for this position:
- A bachelor’s degree in an associated discipline and a minimum of four years of related experience
- A master’s degree in an associated discipline and a minimum of two years of experience
- A PhD in an associated discipline
In addition, a Computer Scientist III must possess the following qualifications:
- Experience with computer-based systems and applications
- Programming skills in languages used for job-specific programming tasks
- Familiarity with the application of industry standard hardware and software design and documentation techniques
- Experience with systems engineering and software development lifecycles
- Effective oral and written communication skills
- Good planning/organizational skills
BENEFITS
- Medical, Dental, Vision Insurance
- Benefits Active on Day 1
- Life Insurance
- Health Savings Accounts/FSA's
- Disability Insurance
- Paid Time Off
- 401(k) Plan Options with Employer Match
- JT4 will match 50%, up to an 8% contribution
- 100% Immediate Vesting
- Tuition Reimbursement
OTHER RESPONSIBILITIES
Each employee must read, understand, and implement the general and specific operational, safety, quality, and environmental requirements of all plans, procedures, and policies pertaining to their job.
WORKING CONDITIONS
Work is performed in a typical office environment with no unusual hazards. Occasional lifting (up to 20 pounds), constant sitting while using the computer terminal, constant use of sight abilities while reviewing documents, constant use of speech/hearing abilities for communication, and constant mental alertness are required.
Travel to remote company work locations may be required.
DISCLAIMER
The above statements are intended to describe the general nature and level of work being performed by personnel assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties, and skills required of persons so classified.
Tasking is in support of a federal government contract that requires U.S. citizenship. Some jobs may require a candidate to be eligible for a government security clearance, state-issued driver's license or other licenses / certifications and the inability to obtain and maintain the required clearance, license or certification may affect an employee's ability to maintain employment.
SCC: JSD12; JCORP12
