DevSecOps Lead at Concept Plus
—
Aug 4, 2026
—
Sep 24, 2026
What this job asks for AI summary
A DevSecOps Lead role at a federal IT consultancy, responsible for designing and operating secure CI/CD pipelines, Infrastructure as Code, and containerized workloads supporting Oracle eBusiness applications on Oracle Cloud Infrastructure (OCI) for a DoD program. The position embeds security controls (RMF/ATO), automated testing, and compliance enforcement across the full delivery lifecycle, and carries team leadership and stakeholder reporting responsibilities. Suited to an experienced practitioner already holding an active Secret clearance and a DoD 8140/8570 IAT-II certification.
Senior level · 5+ years · Washington-Arlington-Alexandria, DC-VA-MD-WV · Bachelor's required · Secret clearance
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Rare in this occupation — lead with these, and say what you built with them.
What the occupation pays Median $158,337 (middle half $126,441–$180,105).
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Aug 6, 2026. It is a model, not a headcount.
Why we read it this way (9)
The job title contains no seniority level word, so advertised seniority is Unspecified; the 5+ years requirement and lead/ownership scope support a Senior classification.
An active DoD Secret clearance is a hard gate to start; a Top Secret clearance is listed under Preferred Qualifications and will give candidates strong preference, but is not a hard requirement.
DoD 8140/8570 IAT-II or higher certification (e.g., CompTIA Security+, CISSP, CASP+) is a hard gate at time of hire — treated as a required qualification even though it is a certification rather than a named technology tool.
The role is headquartered in Fairfax, VA and supports a DoD program; no remote option is stated, so remote is set to false.
SonarQube, Fortify, Checkmarx, Twistlock/Prisma Cloud are listed as examples of SAST/DAST/scanning tools in the Required section — captured as a single skill with alternatives per the 'or equivalent' pattern.
FlexDeploy (Flexagon) appears only under Preferred Qualifications and is specific to Oracle-technology deployments; marked preferred accordingly.
The alternative occupation runner-up (15-1244) reflects the significant infrastructure operations and environment administration duties; however, the primary emphasis on building and maintaining CI/CD pipelines and IaC code makes 15-1252 the stronger fit.
Ignored 1 non-technology phrase(s) as skills (responsibilities/concepts, not named tools): OCI Container Engine for Kubernetes.
Requires a Secret clearance — the cleared population is a small fraction of this occupation, so the real candidate pool is materially smaller than the estimate below, which does not model clearance.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.