Engineering and Infrastructure
DevSecOps Engineer
Build the pipelines that get agency software from commit to production without a scheduled outage and a runbook someone follows by hand.
A release that needs an evening, a checklist, and the one person who knows the sequence is a release that happens rarely and goes badly. This role builds the pipeline that removes that, with the security checks inside it rather than bolted on at the end.
What you will do
- Build and maintain build, test, and deployment pipelines for agency applications.
- Put dependency scanning, static analysis, secret detection, and infrastructure checks inside the pipeline, with agreed thresholds for what blocks a release.
- Produce a software bill of materials for each release and make it usable rather than filed.
- Automate environment provisioning so a test environment resembles production in volume and messiness.
- Work with agency staff so the pipeline is one they can run after handover.
- Reduce deployment risk with staged rollout, health checks, and a rollback that has been exercised.
What we are looking for
- Three or more years building continuous integration and deployment pipelines.
- Experience with containerisation and at least one orchestration platform.
- Comfort with infrastructure as code and configuration management.
- Working knowledge of application security testing tools and how to tune out the noise.
- Scripting and automation across build, test, and release.
- Interest in operability, not just delivery.
Helpful to have
- Experience with supply chain attestation and artefact signing.
- Public-sector delivery experience.
- Familiarity with NIST SP 800-53 or 800-171 control families.
- Prior work handing a pipeline to a customer team.
Screening and eligibility
This position may require fingerprint-based background screening under the CJIS Security Policy before access to customer systems is granted. Some customer programs require United States citizenship. Eligibility is confirmed before assignment, not at application.
Compensation
HQT provides the pay scale for this position on request, and states it in any written offer.
How to apply
Send a resume to careers@hqt.org with the position title in the subject line.
HQT LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. HQT participates in E-Verify. Reasonable accommodations are available upon request.