Lead cybersecurity accreditation and DevSecOps security engineering for U.S. Navy and Department of War systems. Responsibilities include RMF and ATO activities, continuous monitoring, vulnerability management, STIG compliance, POA&M remediation, secure CI/CD pipelines, Kubernetes and virtualization security, ICAM and Zero Trust implementation, authorization documentation, patching, system hardening, and ISSO duties. The role coordinates with government security stakeholders and supports on-site mission systems.
About The Role:
Innovative Defense Technologies (IDT), a leading defense technology company, is seeking a DevSecOps Engineer to be part of our Integrated Mission Systems (IMS) team and based out of our San Diego, CA location.
This DevSecOps Engineer will lead and support cybersecurity accreditation activities for mission-critical Department of War systems, including Authority to Operate (ATO) efforts, Risk Management Framework (RMF) implementation, vulnerability management, continuous monitoring through the Navy and DoW’s DevSecOps deployment pipelines, and security engineering activities supporting U.S. Navy programs. Duties will also include providing and maintaining documentation for processes and procedures, while also providing support to internal engineers or customers on-site.
Clearance & Location Requirements:
- All applicants must be able to obtain/maintain an active Secret U.S. Security Clearance.
- This is an on-site position. Requiring at least 4 days in office, based out of our San Diego, CA location and nearby government facilities.
Key Responsibilities
What You Will Do:
- Help design and implement secure, high-performance architectures for autonomous systems, AI-driven platforms, and edge-computing devices.
- Embed automated security gates (SAST, DAST, IAST, SRM) into CI/CD pipelines to ensure that security is "code-driven" rather than a manual bottleneck.
- Lead the transition from static RMF cycles to Continuous Authority to Operate (cATO) by automating control verification and continuous monitoring.
- Architect secure multi-tenant environments using virtualized (Type-1 Hypervisors) and containerized orchestration (Kubernetes) tailored for IL5/IL6 mission sets.
- Engineer Identity, Credential, and Access Management (ICAM) solutions that enforce Zero Trust principles across distributed hardware and software nodes.
- Lead RMF efforts across all six RMF steps including Categorization, Control Selection, Control Implementation, Assessment, Authorization, and Continuous Monitoring.
- Develop and maintain RMF artifacts including SSPs, SARs, SAPs, POA&Ms, inventories, architecture diagrams, and continuous monitoring documentation.
- Coordinate directly with U.S. Navy Authorizing Officials (AOs), Security Control Assessors (SCAs), ISSMs, ISSOs, and Program Managers. Performing regular server updates, patch management, and software installations.
- Manage cybersecurity authorization packages and support (I)ATO & (I)ATT activities.
- As needed, performing ACAS Scans on various devices across multiple systems
- Collect, review, and submit various STIG checklists for RMF processes
- Develop and maintain access control policies for various organization assets
- Remediate Vulnerabilities and documenting POAMs as required.
- Work with developers and engineers to implement, maintain, and review security processes to maintain compliance and ensure user permissions are accordingly
- Help develop and maintain various golden images in support of business area activities to include operating system images and virtual machines.
- Create and maintain detailed documentation of systems and networks for usage by both technical and non-technical stake holders
- Serve as the appointed Information System Security Officer (ISSO) for product-level Authorizations to Operate (ATOs) and DCSA authorized information systems, supporting security authorization activities and ensuring compliance with applicable cybersecurity policies, standards, and regulatory requirements.
- Perform continuous monitoring (ConMon) activities as assigned by the Information System Security Manager (ISSM) and in accordance with established Risk Management Framework (RMF) requirements and the approved System Security Plan (SSP), including vulnerability assessments, security control assessments, STIG compliance, Plan of Action and Milestones (POA&M) management, and ongoing evaluation of the system security posture to maintain authorization compliance.
- Coordinate with the ISSM on all information system security matters and serve as the on-site representative for DSCA-related activities.
Skills, Knowledge & Expertise
Who You Are (Required):
- Bachelor’s Degree in in Cyber Security, Information Assurance, Computer Science, Information Technology or equivalent full-time professional experience
- Must satisfy DoD 8570/8140 baseline requirements through either:
- Approved 8570/8140 IAM Level 1 certification (Security+, SSCP, GSEC); or
- Relevant qualifying degree (Cybersecurity, Computer Science, IT, or related STEM discipline) recognized by the DoD 8140 educational matrix.
- 5+ years experience in Cybersecurity or Systems Engineering within the Defense Industrial Base (DIB), with a mastery of the Risk Management Framework (RMF).
- Ability to travel up to 10% of the time as needed
What Makes You Stand Out:
- 5+ years in Cybersecurity or Systems Engineering within the Defense Industrial Base (DIB), with a mastery of RMF; this includes:
- Experience navigating the Department of the Navy RAISE 2.0 process to achieve continuous cyber readiness and inherit platform Authority to Operate (cATO/eATO) for containerized mission applications.
- Familiarity with the Overmatch Software Armory (or similar Navy DevSecOps Platforms / RAISE Platforms of Choice) for pipeline execution, automated security gating, SBOM generation, and container scanning.
- Familiarity with deploying, hardening, or integrating software services within Navy tactical environments, specifically ACS and CANES architectures.
- Proficient in CI/CD pipelines, including automated STIG compliance, SAST/DAST, vulnerability remediation, and container hardening to meet Navy Cyber Ready directives.
- Expert-level knowledge of securing OCI-compliant containers (Docker) and Kubernetes (K8s) clusters, including network policies, service meshes (Istio), and runtime security.
- Significant experience with Server Virtualization (ESXi, KVM) and Desktop Virtualization (VDI), including hardware-root-of-trust and secure hypervisor configuration.
- Firm grasp of Infrastructure as Code (IaC) deployments of secure, reproducible environments using Terraform, Ansible, or CloudFormation.
- Experience with automated security assessment tools (ACAS/Nessus, SCAP) and the technical integration of security data into eMASS.
- Experience with configuring multiple forms of authentication to include PKI concepts.
- Experience with having to identify hardware and/or software for purchase to meet various use-cases.
- Experience with Ansible, PowerShell, Chef, Salt, Puppet, or any other configuration automation software.
- DoD 8570/8140 IAM Level III (CISSP, CISM) Certified
If you see yourself reflected in this role and are excited about the impact you could make, we encourage you to apply! If you know someone who may be a great fit, please feel free to share this opportunity with your network.
Pay Range*: $114,000 - $184,000
*Pursuant to California Senate Bill 1162, IDT is required to disclose the “pay scale” or “pay range” associated with a job posting. Notably, however, this amount may not be reflective of actual compensation that may be earned as pay is dependent on a candidate’s experience, skills, and education. The posted range does not include bonuses, commissions, tips, or other benefits. Click here for additional information about Senate Bill 1162. IDT is often looking to place multiple candidates at various levels. Therefore, more than one pay range has been included, commensurate with experience.
Job Benefits
Why Work at Innovative Defense Technologies (IDT):
IDT is a growing company with a vibrant, entrepreneurial culture. We are headquartered in Arlington, VA with additional offices in Fall River, MA; Mount Laurel, NJ; and San Diego, CA. At each location, our employees work together in a modern, snack-filled, and social office space, designing innovative solutions for our defense industry customers. We offer employees competitive pay and benefits including:
- Generous benefits package
- Competitive PTO
- Paid holidays
- 401(k) with immediate vesting and matching
- 9/80 optional schedule (2nd and 4th Friday off every month)
- Tuition Assistance Reimbursement Program
- Professional Development Resources
- Pre-Tax Commuter Benefits
- Organization-Wide Monthly Tech Connect Events
- Annual Employee Recognition Awards
- Regular Social Events and Catered Lunches
EEO Statement:
IDT is an Equal Opportunity employer.
About
Innovative Defense Technologies (IDT) is a leading defense technology company focused on rapidly delivering mission-critical software and systems solutions to the U.S. government. The company specializes in automation, digital engineering, and enabling the rapid integration of advanced capabilities into complex weapon and combat systems. These essential solutions empower the warfighter to field, operate, and sustain decisive capability at speed and scale. At IDT, our employees are developing advanced mission-critical outcomes by consistently delivering high-quality results, fostering innovation, applying rigorous problem-solving, and effectively collaborating across multifaceted teams and stakeholders. Grounded in these competencies, IDT translates complex customer priorities into robust software solutions.
Similar Jobs
Cloud • Fintech • Software • Business Intelligence • Consulting • Financial Services
Provides Oracle NetSuite optimization consulting for clients, including requirements analysis, discovery sessions, solution recommendations, configuration support, user acceptance testing, documentation, and client working sessions. Tracks project work, budgets, and deliverables; communicates status and issues; mentors junior consultants; and supports research, sales, marketing, and cross-selling initiatives.
Top Skills:
ExcelMicrosoft OutlookMicrosoft PowerpointMicrosoft VisioMicrosoft WordOracle Netsuite
Cloud • Fintech • Software • Business Intelligence • Consulting • Financial Services
Leads full-cycle iSolved HCM and payroll implementations, including requirements discovery, configuration, data validation, testing, training, go-live, and post-implementation transition. Manages multiple customer projects, timelines, resources, risks, and deliverables while recommending solutions and coordinating internal teams. Mentors junior consultants, reviews implementation work, and improves implementation processes. Requires knowledge of payroll, time and attendance, benefits, HR administration, and software implementation in a client-facing consulting environment.
Top Skills:
HcmHrisIsolvedSaaS
AdTech • Big Data • Digital Media • Marketing Tech
Build and scale Java backend services, recommendation infrastructure, and data-processing pipelines for Taboola’s performance advertising platform. Design reliable microservices, search and event-driven systems handling billions of events and terabytes of data. Own services end to end, including production monitoring, incident response, root-cause analysis, and continuous improvement. Collaborate with product and architecture teams, manage integration projects, mentor engineers, and use AI-assisted development tools.
Top Skills:
SparkCassandraClaudeCodexCursorDockerElasticsearchGitGoogle BigqueryHadoopJavaKafkaKubernetesMicroservicesMySQLPythonRestful ApisSolrSpring FrameworkVespa
What you need to know about the Los Angeles Tech Scene
Los Angeles is a global leader in entertainment, so it’s no surprise that many of the biggest players in streaming, digital media and game development call the city home. But the city boasts plenty of non-entertainment innovation as well, with tech companies spanning verticals like AI, fintech, e-commerce and biotech. With major universities like Caltech, UCLA, USC and the nearby UC Irvine, the city has a steady supply of top-flight tech and engineering talent — not counting the graduates flocking to Los Angeles from across the world to enjoy its beaches, culture and year-round temperate climate.
Key Facts About Los Angeles Tech
- Number of Tech Workers: 375,800; 5.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Snap, Netflix, SpaceX, Disney, Google
- Key Industries: Artificial intelligence, adtech, media, software, game development
- Funding Landscape: $11.6 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Strong Ventures, Fifth Wall, Upfront Ventures, Mucker Capital, Kittyhawk Ventures
- Research Centers and Universities: California Institute of Technology, UCLA, University of Southern California, UC Irvine, Pepperdine, California Institute for Immunology and Immunotherapy, Center for Quantum Science and Engineering
