Senior DevSecOps Engineer

Ad Hoc is a technology company that empowers organizations to deliver scalable, impactful digital services. Using modern, agile methods, our team creates products that meet people’s needs and transform their experience of government.

Our collaborations have shaped some of the defining moments in public-sector service delivery. We’ve helped build products that connect Veterans to tailored services, help millions access affordable health care, and support important programs like Head Start. As we work with agencies to deliver critical services, we’re also changing how the government approaches technology.

Our culture, communications, and tools are built for remote work, enabling us to bring together top talent nationwide. At Ad Hoc, remote life empowers our teams to design work environments that fit their lives and that foster flexibility and collaboration to achieve positive outcomes for our customers.

Ad Hoc values acceptance, accountability, and humility. We aren’t heroes. We learn from our mistakes and improve the process for the next time. We build small, inclusive teams to collaborate closely with our partners to solve the right problems and deliver software that works.

The Veterans Affairs business unit helps transform the VA into a modern digital services organization where Veteran outcomes are at the center of every effort. We partner with the VA to design and deliver seamless user experiences for Veterans, their families and caregivers, and VA employees. By applying better practices in service design, product management, and technology, we enable the VA to increase the use, quality, and reliability of services and decrease the time Veterans spend waiting for outcomes.

As a Senior DevSecOps Engineer, you will serve as a platform automation and secure-delivery subject matter expert supporting a large federal enterprise cloud platform, designing and operating the secure, automated CI/CD pipelines that keep mission-critical applications running. With minimal oversight, you will help the program meet its scope, schedule, and delivery commitments while advancing its DevSecOps and zero-trust practices. Primary expectations of a Senior DevSecOps Engineer include:

• →Designing and operating secure, automated, scalable CI/CD pipelines for hosted applications
• →Embedding security across the pipeline (“shift left”), including SAST, SCA, container and image scanning, and policy-as-code, to meet quality, vulnerability, and compliance thresholds
• →Engineering and maintaining infrastructure as code (Terraform) so that environment configuration, including Kubernetes clusters, VPCs, IAM, security groups, and routing, is fully provisioned and version-controlled
• →Building and hardening containerized, Kubernetes-based (Amazon EKS) deployments aligned to standardized baselines and 12-factor principles
• →Applying zero-trust principles and supporting the platform's continuous Authority to Operate (ATO), partnering with security and compliance so engineered controls produce audit-ready evidence
• →Collaborating with government stakeholders and application teams operating under approved DevSecOps change-control processes
• →Working within a Scaled Agile (SAFe) cadence of PI planning, sprints, and Agile ceremonies
• →Participating in technical depth interviews with new candidates

• Bachelor's and 7+ years of experience; relevant experience may be substituted for education
• Demonstrated, hands-on expertise with CI/CD pipeline architecture and at least one infrastructure-as-code tool (Terraform preferred)
• Strong command of containerization and Kubernetes-based deployment, plus core DevOps concepts including networking, virtualization, and secure delivery automation
• Experience integrating security tooling (vulnerability scanning, static analysis) into delivery pipelines
• Must be able to obtain and maintain a U.S. Public Trust / suitability determination

• Prior experience with the Department of Veterans Affairs
• Hands-on AWS experience and familiarity with FedRAMP, NIST 800-53, and zero-trust architecture
• Relevant certifications (e.g., AWS DevOps Engineer or Security Specialty, CKA/CKS, CISSP)
• Experience operating in a SAFe environment