Cloud Engineer / DevSecOps / CI-CD

Halvik Corp delivers a wide range of services to 13 executive agencies and 15 independent agencies. Halvik is a highly successful WOB business with more than 50 prime contracts and 500+ professionals delivering Digital Services, Advanced Analytics, Artificial Intelligence/Machine Learning, Cyber Security and Cutting-Edge Technology across the US Government. Be a part of something special!

Position Overview

Halvik is seeking a Cloud Engineer / DevSecOps / CI-CD professional to support the U.S. Department of Transportation (DOT) Office of the Chief Digital & Information Officer (OCDIO) Digital Factory capacity task order. Operating under DOT's IT Modernization Initiative (ITIM-2025-007) and the 2025–2029 "Path to 1DOT IT" strategy, the program delivers modernized, secure, and resilient applications through a Software Factory, Capacity-as-a-Service (CaaS) model. Halvik provides Agile Scrum teams for Development, Modernization, and Enhancement (DME) work across cloud, on-premises, and SaaS platforms hosted within the USDOT IT security boundary.

As a core member of Halvik's DME Scrum teams, this role implements and maintains the secure, automated pipelines that move code from commit to production. The Cloud Engineer / DevSecOps / CI-CD provides cloud infrastructure automation, supports DevSecOps toolchains, and oversees release orchestration across development, QA, staging, and production environments. The position is central to the end-client's objectives: it enables fast, repeatable, and reliable releases, embeds security scanning and automated testing directly into delivery, and produces the audit-ready evidence DOT needs to maintain Authority to Operate (ATO) for modernized systems.

Core Responsibilities

• Strategic Execution: Lead the design, implementation, and continuous improvement of secure CI/CD pipelines using Government-furnished tools such as GitHub Enterprise and Azure DevOps, building reusable pipeline patterns and delivery standards that can be replicated across DOT Operating Administrations.
• Operational Oversight: Manage release orchestration and environment promotion across Development, QA, UAT/Staging, and Production. Maintain deployment scripts, rollback procedures, and data-restore paths, and validate configuration settings, secrets handling, feature flags, and configuration drift before every production release.
• Collaboration: Coordinate with developers, solutions architects, QA and test automation engineers, the Scrum Master, DOT infrastructure teams, the DOT Security Operations Center (SOC), and Federal ISSOs to align sprint work with security requirements, support Digital Factory governance checkpoints (architecture alignment, security posture reviews, release readiness), and resolve environment and deployment issues.
• Technical Performance: Provision and automate cloud infrastructure (e.g., AWS GovCloud, Microsoft Azure Government) using infrastructure-as-code, and configure monitoring and automated alerting (e.g., AWS CloudWatch, Azure Monitor, Splunk) to track performance, error rates, and security events and enable rapid response to outages or anomalies.
• Security Integration: Embed security scanning and policy enforcement into pipelines, including static and dynamic code analysis, dependency and container scanning, and vulnerability checks aligned to the OWASP Top 10, so that no new POA&M-triggering weaknesses reach production.
• Test Automation Enablement: Integrate automated testing into the CI/CD process using Government-furnished tools (currently ClicTest), make test execution results available for sprint demos and release readiness reviews, and support the program's progressive transition from manual to automated testing.
• ATO Evidence and Documentation: Support the Government in preparing and maintaining ATO artifacts, including SSP updates, control implementation evidence, configuration management and scan evidence, and POA&M status inputs. Maintain the Configuration Management Plan, Systems Administration Manual, and IT Contingency Plan inputs.
• Vulnerability and Patch Management: Participate in routine compliance reviews and vulnerability scans, remediate findings in coordination with DOT SOC and ISSOs, and apply OS patches, library upgrades, and platform updates to keep environments secure and current.
• Asset Stewardship: Keep all code, pipelines, and data within the USDOT IT security boundary, and inventory contractor-created digital assets such as Git repositories, CI/CD pipelines, and DevOps workspaces for turnover to the Government.
• Migration and Cutover Support: Automate data migration and cutover activities for legacy modernization efforts, including dry runs, rollback strategies, audit logging, and least-privilege access controls.

Minimum Requirements

• Education: Bachelor's Degree in Computer Science, Information Technology, Computer Engineering, Cybersecurity, or a related field.
• Experience: Minimum of 7 years of professional experience in cloud engineering, DevOps/DevSecOps, or systems engineering, including at least 3 years building and operating CI/CD pipelines for Agile software teams in a Federal Government environment.
• Technical Proficiency: Advanced knowledge of CI/CD platforms (GitHub Enterprise/GitHub Actions, Azure DevOps), Git, AWS and/or Microsoft Azure, infrastructure-as-code (e.g., Terraform, CloudFormation, ARM/Bicep), containers and orchestration (Docker, Kubernetes), scripting (PowerShell, Bash, or Python), and security scanning tools (SAST, DAST, dependency and container scanning).
• Compliance: Must meet U.S. DOT contract requirements, including a favorable Public Trust background investigation and suitability determination. Must follow secure coding and delivery practices aligned with NIST SP 800-218 (Secure Software Development Framework) and the OWASP Top 10.
• Certifications: At least one current cloud or DevOps certification, such as AWS Certified DevOps Engineer or Solutions Architect, Microsoft Certified: Azure DevOps Engineer Expert or Azure Administrator, or Certified Kubernetes Administrator (CKA). CompTIA Security+ or an equivalent security certification is preferred.
• Security Clearance: DOT Public Trust

Preferred Expertise

• Demonstrated success in Federal Contracting, particularly civilian agency IT modernization or Software Factory programs; prior DOT experience is a plus.
• Familiarity with Agile/Scrum team delivery and with FedRAMP-authorized environments such as AWS GovCloud and Azure Government.
• Experience with the NIST Risk Management Framework (NIST SP 800-53), ATO processes, continuous monitoring, and FISMA compliance.
• Experience supporting deployment pipelines for enterprise platforms used at DOT, such as Salesforce, Microsoft Power Platform, ServiceNow, Dynamics 365, Appian, .NET, or Java applications.
• Strong analytical and problem-solving capabilities.