# Mid-Level DevSecOps Engineer at GRVTY

> United States · Mid-level · Software engineering · open. Source: https://alderhq.app/jobs/greenhouse%3Agrvty%3A4424119009 (read 2026-11-07).

## Facts (observed)

- Company: [GRVTY](https://alderhq.app/companies/grvty)
- Location text: Herndon, Virginia, United States; Herndon, VA
- Where it can be done from (inferred): United States (evidence: "Location: Herndon, Virginia, United States; Herndon, VA")
- Posted: 2026-09-29 (39 days ago)
- First seen by alder: 2026-11-02 · last verified: 2026-11-04
- Reposted: 0 times · edited: 0 times
- Apply on the employer's site: https://job-boards.greenhouse.io/grvty/jobs/4424119009
- Skills listed (inferred): TypeScript, Python, Go, Java, C#/.NET, Azure, Kubernetes, Docker, Terraform

## Pay and sponsorship

- Posted pay: $150k–$250k per year (from the listing's pay field)
- Market band for similar posted roles (United States, n 429): p25 $112k, median $130k, p75 $150k
- H-1B filings at this company for similar roles, FY26: 1 ([US DOL OFLC LCA disclosure data](https://www.dol.gov/agencies/eta/foreign-labor/performance))

## Description (the employer's text)

### What Impact You'll Have

GRVTY is seeking a Mid-level DevSecOps Engineer with a TS/SCI to join one of our top projects in Herndon, VA, to support the development, integration, and cybersecurity compliance of intelligence capabilities in Development and Production environments. This is a software engineering-focused DevSecOps role. The primary focus is designing, coding, testing, and maintaining software and automation tools that streamline Cyber Security workflows and improve the reliability of our platforms. We are looking for a candidate with a software development background who can build scalable, reliable systems and developer tools, and contribute to DevSecOps pipelines that integrate and deploy components across multiple networks into private cloud infrastructures hosted for our government customer.

As a GRVTY team member, you will closely support our mission partners, and your work will have direct mission impact. You will work with DevSecOps engineers, software developers, infrastructure technicians, and cybersecurity professionals to use open-source technology to create and maintain the full stack of a High-Performance Computing (HPC) system that hosts applications for thousands of users.

### What You'll be Owning

- Deploy and manage highly available applications to ensure system reliability and scalability.
- Implement and maintain HashiCorp Nomad and Kubernetes clusters for workload orchestration.
- Execute DNS configuration, management, and performance tuning for enterprise-grade systems.
- Develop and implement Infrastructure-as-Code (IaC) solutions using tools like Terraform, Ansible, or similar.
- Build and manage multiple CI/CD pipelines with GitLab or equivalent tools to automate deployments and streamline development workflows for rapid development and integration
- Perform system monitoring, logging, and troubleshooting to proactively identify and resolve issues.
- Automate security testing and monitoring within the DevOps workflows using ACAS and Trivy.
- Analyze cybersecurity scan findings and work with the cybersecurity team to identify false positives.
- Assist the cybersecurity team in assembling the required Body of Evidence for False Positive exceptions.
- Assist the cybersecurity team in assembling the required Body of Evidence to submit containerized and non-containerized software packages for enterprise software approval.
- Integrate static code analysis tools such as GitLab SAST, Fortify, or SonarQube and other security mechanisms into CI/CD pipelines.
- Build and maintain software tools that automate cybersecurity analysis and correlation workflows as compliance requirements evolve.
- Perform cybersecurity remediation on DevSecOps-managed virtual machines, including OS patching, OS STIG implementation, and software package updates.
- Build, maintain, and monitor configuration management of release products.
- Troubleshoot and resolve issues in networks, automation pipelines, and infrastructure.
### What You Must Have

- Active TS/SCI and be willing and able to pass a CI polygraph
- Must be able and willing to work 40 hours per week in a SCIF in Herndon, Virginia.
- At least 3 years of industry experience in software development or software engineering.
- At least 5 years of industry experience in DevSecOps, with a bachelor’s degree in Computer Science, Information Systems, or a related field; or a master’s degree and at least 3 years of relevant experience.
- Demonstrated professional software development experience is required. Candidates must be able to design, write, test, debug, and maintain software using at least one language such as Python, Go, Java, C#, or similar. Experience building automation tools, APIs, or applications is central to this role.
- Strong expertise in cloud environments, including deployment, optimization, and troubleshooting.
- Proven track record in building and operating Cloud Native Applications using tools like Kubernetes and Docker.
- In-depth experience with IaC tools such as Terraform, Ansible, or equivalent.
- Solid experience in creating and managing CI/CD build pipelines using GitLab or similar tools (e.g., Jenkins, Azure DevOps).

---
Data: alder (https://alderhq.app). Cite https://alderhq.app/jobs/greenhouse%3Agrvty%3A4424119009 and the date you read it. Observed facts come from the employer's own listing; location reach, level, family and skills are inferences.