Jr. DevSecOps Engineer

About Concept Plus

Concept Plus is a mission-focused technology solutions provider that transforms IT concepts into impactful solutions for federal agencies. Headquartered in Fairfax, VA, we bring the agility, responsiveness, and customer intimacy of a small business combined with the quality and infrastructure of a larger firm.

Recognized as an award-winning Oracle partner, we have delivered innovative solutions across Defense, Intelligence, Civilian, Health IT, and Tribal sectors. Our highly certified experts build systems that drive efficiency, accelerate modernization, and ensure mission outcomes with certainty.

We offer competitive pay, comprehensive health, dental, and vision insurance, paid life insurance, paid time off, 11 paid holidays, performance bonuses, tuition reimbursement, unlimited training, and the opportunity to thrive in a collaborative, flexible, and innovative environment.

For more information, visit www.conceptplus.com.

About the role

Concept Plus is seeking a Junior DevSecOps Engineer to support a client program-an enterprise-scale application operating in secure environments, including Denied, Degraded, Intermittent, and Limited (DDIL) communication conditions. This role is ideal for an early career engineer with a solid foundation in CI/CD processes, automation, secure development practices, and cloud environments. The selected candidate will work closely with senior DevSecOps engineers to support secure pipelines, infrastructure automation, continuous monitoring, and application deployment processes in a multi-vendor Agile environment.

What you'll do

• DevSecOps Engineering & CI/CD Pipeline Support

• Support the maintenance and enhancement of secure CI/CD pipelines used for automated builds, testing, scanning, packaging, and deployments.

• Assist in configuring and running automated security scans including SAST, DAST, and SCA.

• Contribute to the integration of frontend and backend components into the DevSecOps pipeline (e.g., Node.js, Python, React/Vue builds).

• Assist with container image validation, dependency scanning, and hardening tasks.

• Support log aggregation, build monitoring, and alerting workflows for pipeline health.

• Cloud Engineering (Cloud One / GovCloud)

• Assist with cloud environment configuration, deployment validation, and infrastructure troubleshooting under senior engineer supervision.

• Learn Cloud One platform fundamentals and participate in environment provisioning tasks.

• Support Continuous Monitoring (ConMon) activities including event logging and resource status reporting.

• Security & Zero Trust Enablement

• Learn and apply secure coding principles, vulnerability remediation workflows, and DoD cybersecurity best practices.

• Assist in documentation and technical support required for Authority to Operate (ATO) activities.

• Help enforce least-privilege access, secret scanning, and environment hardening tasks aligned with Zero Trust architecture.

• Automation & Infrastructure Support

• Assist in writing and updating scripts (Python, Node.js, Bash, or PowerShell) used for deployments, system checks, and environment automation tasks.

• Support configuration management activities and maintain environment documentation, checklists, and SOPs.

• Contribute to troubleshooting infrastructure issues in collaboration with cloud and security engineers.

• Additional Responsibilities

• Participate in Agile ceremonies: sprint planning, standups, backlog refinement, reviews, and retrospectives.

• Collaborate with senior DevSecOps engineers, backend teams, UI developers, and government stakeholders across a multi-contractor environment.

• Support Tier 1-2 troubleshooting for pipeline issues, deployment errors, or environment inconsistencies.

• Adhere to MOSA aligned DevSecOps practices and contribute to continuous improvement efforts.

Required Qualifications

• US Citizen
• Ability to obtain and/or maintain a government clearance.
• 1-3 years of experience in DevOps, DevSecOps, cloud engineering, or software automation roles.
• Bachelors Degree
• Foundational knowledge of CI/CD pipelines (GitLab CI, GitHub Actions, Jenkins, or similar).
• Familiarity with Git version control and collaborative branching/PR workflows.
• Understanding of secure coding practices and desire to learn DoD aligned security requirements.
• Hands-on experience with scripting languages such as Python, Node.js, Bash, or PowerShell.
• Basic understanding of container technologies (Docker) and package management workflows.
• Strong communication skills and willingness to learn from senior engineers.
• Ability to troubleshoot issues, research solutions, and contribute in a fast-paced Agile environment

Preferred Qualifications

• Exposure to cloud platforms such as Cloud One, AWS GovCloud, Azure Government, or Oracle Cloud.
• Familiarity with SAST/DAST/SCA tools or security scanning concepts.
• Experience supporting CI/CD pipelines for full-stack applications (React/Vue, Node.js, Python).
• Understanding of microservices, container orchestration, or Infrastructure-as-Code (IaC) concepts.
• Experience supporting or building PWAs, Electron apps, or DDIL-oriented systems is a plus.
• Familiarity with DHA/JOMIS systems (OMDS, MedCOP, MHS GENESIS).
• Contributions to open-source DevOps tooling or a public portfolio (GitHub, GitLab).

Concept Plus is an Equal Opportunity Employer. As such, we will give your application full consideration without regard to your race, color, religion, sex, age, national origin, disability, veteran status, sexual orientation, gender identity, or any other classification protected by federal, state, or local law.