Full job description

M9 Solutions is dedicated to providing IT services and solutions to the Federal Government by mobilizing the right people, skills, clearance levels, and technologies to help organizations that desire improved performance and modern, sustainable change. M9 has provided quality IT services and support to more than 30 Federal Agencies and multiple commercial customers nationwide. Our capabilities include IT Talent Solutions, Data Delivery & Analytics, Cyber Security, Cloud Migration, Applications and Infrastructure, Software Development, and Finance & Accounting.

M9 Solutions is seeking a Sr DevSecOps Engineer III (State) to work on-site in support of a government contract for a client located in Washington, DC. An active TS/SCI clearance is required.

Responsibilities

Designs, implements, and maintains secure CI/CD pipelines for deployment of security tools and supporting infrastructure.
Automates infrastructure provisioning using Infrastructure as Code (IaC) across on-premises VMware and cloud environments.
Integrates security controls (SAST, DAST, container scanning, compliance checks) into DevOps workflows.
Supports migration of security platforms into a dedicated enclave, ensuring minimal downtime and data integrity.
Collaborates with cybersecurity and infrastructure teams to enforce secure configurations and continuous monitoring.
Implements logging, monitoring, and alerting pipelines for system and application health.

Required Skills and Qualifications

TS/SCI security clearance.
10+ years of experience in DevSecOps, Software Engineering, or related engineering disciplines.
Experience with Infrastructure-as-Code tools (e.g., Terraform and/or CloudFormation, Ansible).
Experience with containerization and orchestration tools (e.g., Docker and Kubernetes).
Experience with CI/CD tools (e.g., Jenkins, GitLab CI/CD, or Azure DevOps).
Experience with hybrid environments such as VMware and cloud platforms (e.g., AWS, Azure, or GCP).
Experience implementing security compliance frameworks (e.g., RMF, NIST 800-53, STIGs), and integrating security tools into pipelines (e.g., vulnerability scanning, secrets management).
Proficiency with Python, Bash, and/or PowerShell.