DevSecOps Project Lead (Sr DevSecOps Engineer)

ABOUT DEFCON AI RESILIENCE IN THE FACE OF DISRUPTION. DEFCON AI is an insights company that leverages artificial intelligence, mathematical optimization, data analytics, and software engineering for resilient optimization of complex systems. In today’s dynamically changing world, DEFCON AI’s technology aligns outcomes with operational goals, better decision making, and empowers customers to anticipate assess, and mitigate the impacts of disruptions. About the Role This is a rare opportunity to build a production deployment pipeline for mission-critical DoW software from the ground up. As the DevSecOps Project Lead, you will own the end-to-end software delivery lifecycle—from code intake through secure, scalable production deployment. Your charter is simple but high-stakes: ensure that software can be deployed reliably, securely, and on mission timelines in DoW environments. You will design and operate the DevSecOps pipeline, define the hosting architecture, and integrate security and compliance directly into delivery. This role spans both modern commercial DevOps practices and the realities of DoW deployment (IL-5 today with a path to IL-6), requiring you to make critical decisions across government networks, cloud environments, and hybrid architectures. This is a senior role combining hands-on execution with system-level ownership. You will build key components directly while guiding the transition from an existing government-furnished environment to a scalable, long-term production system. Key Responsibilities Hosting Architecture & Production Environment Design and scale hosting architecture in IL-5 environments with a path to IL-6 Evaluate and select deployment strategies across government networks, GovCloud, and hybrid platforms Build a production environment that supports zero-downtime deployments and enterprise-scale growth DevSecOps Pipeline Ownership Design, build, and operate a modern CI/CD pipeline with integrated testing, security scanning, and compliance validation Establish and manage development, staging, and production environments Ensure alignment with DoW requirements (e.g., Iron Bank, STIGs, ACAS/OpenSCAP, FIPS) Transition & System Consolidation Lead transition from incumbent contractor and government-furnished environments Inventory, assess, and rationalize existing services, dependencies, and infrastructure Simplify and consolidate architecture into a scalable, maintainable system Release Management & Delivery Performance Own release cadence from capability intake through production deployment Ensure deployment quality through monitoring, rollback readiness, and performance metrics (e.g., uptime, failure rates) Support continuous delivery aligned with government timelines and operational needs Security Integration & ATO Readiness Partner with Platform Security and RMF leadership to align on ATO strategy Ensure the pipeline generates required artifacts for authorization and continuous compliance Embed security and compliance into the delivery lifecycle—not as a post-deployment step Required Qualifications 8+ years of DevOps/DevSecOps engineering experience, including at least one production pipeline owned end-to-end at scale 5+ years experience operating in DoW cloud environments (Azure Gov IL-5, AWS GovCloud, or equivalent IL-5 authorized environment). Working knowledge of DoW impact-level boundaries and the CC SRG.3 Hands-on experience managing at least one complete ATO or cATO pathway in production. US Citizenship Required Active Secret Clearance (TS/SCI preferred) Willingness to travel up to 25% to USMC sites, Defcon AI HQ, and industry vendor facilities as required Preferred Qualifications Active TS/SCI Clearance Experience supporting USMC or similar Service environments ] Experience transitioning systems from one contractor to another Experience with Iron Bank container certification Familiarity with platforms such as Second Front (Game Warden), Stormbreaker, or Black Pearl Exposure to Palantir Foundr