DevSecOps Engineer IV

About the role

A US Government Client is seeking a DevSecOps Engineer to strengthen our software development lifecycle by embedding security practices into every stage of delivery. This role will work across development, operations, and security teams to ensure applications and infrastructure are secure, compliant, and resilient, while maintaining speed and efficiency in deployment.

Responsibilities

The ideal candidate will be responsible for streamlining our development and operational processes, ensuring efficient deployment and management of applications in cloud environments. Key responsibilities include:

• Release management in DEV/SIT/CAT/PROD environments for major/minor releases, patches and upgrades
• Creating and managing Continuous Integration/Continuous Delivery (CI/CD) pipelines
• Supporting code promotion and monitoring, and providing data fixes as required
• Utilizing AI technologies to convert manual tasks into automated workflows
• Integrating existing automation frameworks with AI-based solutions to improve coverage, reliability, and efficiency
• Designing, implementing, and maintaining secure CI/CD pipelines with automated security checks
• Collaborating with developers to enforce secure coding practices and integrating application security testing tools into development workflows
• Automating compliance checks and code analysis in CI/CD pipelines
• Utilizing cloud security services and configurations, such as AWS, Azure, or GCP
• Securing Docker and Kubernetes workloads
• Developing RESTful APIs and microservices to facilitate communication between applications
• Maintaining databases, including MySQL, PostgreSQL, Oracle, and Microsoft SQL Server
• Participating in Agile development processes to improve software delivery cycles
• Troubleshooting issues across the application stack from front-end to back-end services
• Implementing Infrastructure as Code (IaC) with secure configurations using Terraform, Ansible, or CloudFormation
• Monitoring and responding to security incidents, leveraging SIEM tools and observability platforms
• Ensuring compliance with industry standards and regulations, such as ISO 27001, NIST, GDPR, HIPAA, and PCI DSS
• Providing training and guidance to teams on DevSecOps best practices

Qualifications

The ideal candidate will have a Bachelor's degree in Computer Science, Cybersecurity, or a related field, and a minimum of 13-20 years of relevant experience. Additional qualifications include:

• Proven experience in DevOps, Security Engineering, or Cloud Security
• Strong knowledge of CI/CD tools, such as Jenkins, GitLab CI/CD, and Azure DevOps
• Hands-on experience with cloud platforms, including AWS, Azure, and GCP
• Proficiency in programming/scripting languages, such as Python and Java
• Familiarity with containerization and orchestration, including Docker and Kubernetes
• Experience with security automation tools and vulnerability management

Skills

Additional required skills and experience include:

• Experience with troubleshooting, triaging, and resolving issues in CI/CD pipeline failures or latency
• Experience with developing enterprise cloud-native platforms using Kubernetes, Docker, or CI/CD tools
• Experience with employing an Infrastructure as Code (IaC) approach to managing cloud environments
• Experience with creating and improving automation scripts across multiple technical stacks using Python
• Experience with troubleshooting and resolving issues related to both open source and commercial tools in public cloud environments
• Knowledge of NoSQL databases and SQL-based systems
• Understanding of DevOps methodologies, including CI/CD practices
• Experience with configuration management tools

Benefits

The client offers a competitive compensation package and opportunities for professional growth and development.

Pay

Pay will be commensurate with experience, with opportunities for overtime pay with pre-approval from the client manager.

Schedule

The standard work week for contract staff will be 5 days a week and 8 hours per day, preferably Monday through Friday, with potential for travel to support business efforts.