Cloud Engineer DevSecOps CI-CD

Halvik Corp delivers a wide range of services to 13 executive agencies and 15 independent agencies. Halvik is a highly successful WOB business with more than 50 prime contracts and 500 professionals delivering Digital Services Advanced Analytics Artificial Intelligence/Machine Learning Cyber Security and Cutting-Edge Technology across the US Government. Be a part of something special!

Position Overview

Halvik is seeking a Cloud Engineer / DevSecOps / CI-CD professional to support the U.S. Department of Transportation (DOT) Office of the Chief Digital & Information Officer (OCDIO) Digital Factory capacity task order. Operating under DOTs IT Modernization Initiative (ITIM) and the Path to 1DOT IT strategy the program delivers modernized secure and resilient applications through a Software Factory Capacity-as-a-Service (CaaS) model. Halvik provides Agile Scrum teams for Development Modernization and Enhancement (DME) work across cloud on-premises and SaaS platforms hosted within the USDOT IT security boundary.

As a core member of Halviks DME Scrum teams this role implements and maintains the secure automated pipelines that move code from commit to production. The Cloud Engineer / DevSecOps / CI-CD provides cloud infrastructure automation supports DevSecOps toolchains and oversees release orchestration across development QA staging and production environments. The position is central to the end-clients objectives: it enables fast repeatable and reliable releases embeds security scanning and automated testing directly into delivery and produces the audit-ready evidence DOT needs to maintain Authority to Operate (ATO) for modernized systems.

Core Responsibilities

• Strategic Execution: Lead the design implementation and continuous improvement of secure CI/CD pipelines using Government-furnished tools such as GitHub Enterprise and Azure DevOps building reusable pipeline patterns and delivery standards that can be replicated across DOT Operating Administrations.
• Operational Oversight: Manage release orchestration and environment promotion across Development QA UAT/Staging and Production. Maintain deployment scripts rollback procedures and data-restore paths and validate configuration settings secrets handling feature flags and configuration drift before every production release.
• Collaboration: Coordinate with developers solutions architects QA and test automation engineers the Scrum Master DOT infrastructure teams the DOT Security Operations Center (SOC) and Federal ISSOs to align sprint work with security requirements support Digital Factory governance checkpoints (architecture alignment security posture reviews release readiness) and resolve environment and deployment issues.
• Technical Performance: Provision and automate cloud infrastructure (e.g. AWS GovCloud Microsoft Azure Government) using infrastructure-as-code and configure monitoring and automated alerting (e.g. AWS CloudWatch Azure Monitor Splunk) to track performance error rates and security events and enable rapid response to outages or anomalies.
• Security Integration: Embed security scanning and policy enforcement into pipelines including static and dynamic code analysis dependency and container scanning and vulnerability checks aligned to the OWASP Top 10 so that no new POA&M-triggering weaknesses reach production.
• Test Automation Enablement: Integrate automated testing into the CI/CD process using Government-furnished tools (currently ClicTest) make test execution results available for sprint demos and release readiness reviews and support the programs progressive transition from manual to automated testing.
• ATO Evidence and Documentation: Support the Government in preparing and maintaining ATO artifacts including SSP updates control implementation evidence configuration management and scan evidence and POA&M status inputs. Maintain the Configuration Management Plan Systems Administration Manual and IT Contingency Plan inputs.
• Vulnerability and Patch Management: Participate in routine compliance reviews and vulnerability scans remediate findings in coordination with DOT SOC and ISSOs and apply OS patches library upgrades and platform updates to keep environments secure and current.
• Asset Stewardship: Keep all code pipelines and data within the USDOT IT security boundary and inventory contractor-created digital assets such as Git repositories CI/CD pipelines and DevOps workspaces for turnover to the Government.
• Migration and Cutover Support: Automate data migration and cutover activities for legacy modernization efforts including dry runs rollback strategies audit logging and least-privilege access controls.

Minimum Requirements

• Education: Bachelors Degree in Computer Science Information Technology Computer Engineering Cybersecurity or a related field.
• Experience: Minimum of 7 years of professional experience in cloud engineering DevOps/DevSecOps or systems engineering including at least 3 years building and operating CI/CD pipelines for Agile software teams in a Federal Government environment.
• Technical Proficiency: Advanced knowledge of CI/CD platforms (GitHub Enterprise/GitHub Actions Azure DevOps) Git AWS and/or Microsoft Azure infrastructure-as-code (e.g. Terraform CloudFormation ARM/Bicep) containers and orchestration (Docker Kubernetes) scripting (PowerShell Bash or Python) and security scanning tools (SAST DAST dependency and container scanning).
• Compliance: Must meet U.S. DOT contract requirements including a favorable Public Trust background investigation and suitability determination. Must follow secure coding and delivery practices aligned with NIST SP 800-218 (Secure Software Development Framework) and the OWASP Top 10.
• Certifications: At least one current cloud or DevOps certification such as AWS Certified DevOps Engineer or Solutions Architect Microsoft Certified: Azure DevOps Engineer Expert or Azure Administrator or Certified Kubernetes Administrator (CKA). CompTIA Security or an equivalent security certification is preferred.
• Security Clearance: DOT Public Trust

Preferred Expertise

• Demonstrated success in Federal Contracting particularly civilian agency IT modernization or Software Factory programs; prior DOT experience is a plus.
• Familiarity with Agile/Scrum team delivery and with FedRAMP-authorized environments such as AWS GovCloud and Azure Government.
• Experience with the NIST Risk Management Framework (NIST SP 800-53) ATO processes continuous monitoring and FISMA compliance.
• Experience supporting deployment pipelines for enterprise platforms used at DOT such as Salesforce Microsoft Power Platform ServiceNow Dynamics 365 or Java applications.
• Strong analytical and problem-solving capabilities.