DevSecOps Engineer

Overview

The DevSecOps Engineer supports the planning, analysis, and implementation activities required to migrate federal government applications into the CyberArk Privileged Access Management (PAM) platform. This role is responsible for providing technical insight into current-state application environments, validating implementation feasibility, identifying dependencies and operational constraints, and supporting the development of technical requirements and migration documentation.

Responsibilities

• Analyze current-state application environments to identify how service accounts, application accounts, database accounts, and secrets are currently used and managed.
• Review application architectures, authentication methods, scripts, integrations, and operational processes to determine impacts associated with migrating accounts into CyberArk.
• Assess technical feasibility, system dependencies, operational constraints, and integration requirements related to CyberArk onboarding activities.
• Support requirements gathering and technical discovery sessions with application, infrastructure, security, and cloud engineering teams.
• Identify and document technical impacts associated with credential rotation, password management changes, and privileged access policy updates.
• Support the development and maintenance of technical documentation, architectural diagrams, process flows, and implementation guidance.
• Assist in documenting account inventories, onboarding requirements, safe mappings, access models, and integration dependencies.
• Review Jira epics, features, and user stories for technical feasibility, completeness, and consistency across systems.
• Collaborate with development and infrastructure teams to validate implementation approaches and ensure alignment across environments.
• Aid in identifying risks, blockers, and operational considerations associated with migration activities.
• Maintain positive working relationships with federal clients, delivery teams, and technical stakeholders while supporting mission-critical systems.

Requirements

• Bachelor’s degree and 1 year of relevant experience.
• Additional 2 years of experience with an Associate’s Degree.
• Additional 4 years of experience with a high school diploma.
• Experience supporting DevSecOps, infrastructure engineering, application support, or system administration activities in enterprise environments.
• Basic understanding of privileged access management (PAM), credential management, or cybersecurity best practices.
• Experience analyzing application configurations, service accounts, authentication methods, or infrastructure dependencies.
• Experience supporting technical documentation and requirements analysis activities.
• Familiarity with cloud environments and secret management solutions such as AWS Secrets Manager.
• Familiarity with scripting, automation, CI/CD pipelines, or infrastructure automation concepts.
• Strong analytical and problem-solving skills.
• Excellent verbal and written communication skills.
• Strong attention to detail and organizational skills.
• Ability to shift focus between competing priorities in a fast-paced environment.
• Ability to work collaboratively across technical and operational teams.

Qualifications

• Basic understanding of credential rotation, RBAC, and enterprise authentication concepts.
• Experience supporting CyberArk or other Privileged Access Management (PAM) platforms.
• Experience supporting federal government systems or environments.
• Experience supporting Public Trust or other federal security compliance requirements.
• Familiarity with AWS cloud services and security best practices.
• Experience using Jira and Confluence.
• Familiarity with DevSecOps and Agile delivery methodologies.
• Experience supporting application modernization or cybersecurity modernization initiatives.