An Approach to Building A Scalable Enterprise DevSecOps Ecosystem (SEDE) Within DoD

The U.S Department of Defense (DoD) develops and maintains thousands of weapons and business systems that support its mission to deter war and ensure the nation’s security. Managing a portfolio of systems of this scale while maintaining security and agility requires more than adopting modern Agile software development and DevOps practices to build applications - it requires a secure, consistent, scalable solution that that can readily be adopted by teams across each of the branches of the Armed Forces. The recent establishment of the DoD Enterprise DevSecOps Initiative (DSOP), led by the Air Force, aims to address this challenge deliver a consistent set of automated tools, services and standards that enable programs to develop, secure, deploy, and operate applications in a secure, flexible and interoperable manner. While these efforts are focused on providing developers with the capabilities to enable DevSecOps, a complete DevSecOps ecosystem including supporting enterprise IT and business services are required to effectively scale the solution.  In this submission we propose an approach to developing a Scalable Enterprise DevSecOps Ecosystem (SEDE) to address some of these challenges and increase ability to scale the initiative