DevSecOps Engineer

VMD Corp

2d•Remote

About The Position

The CI/CD Pipeline Engineer designs, develops, implements, maintains, and optimizes CI/CD pipelines for enterprise application development and deployment. The role automates software builds, testing, security scanning, artifact management, and deployments to improve release efficiency, software quality, system reliability, and security compliance. Working with application developers, cloud engineers, system administrators, cybersecurity personnel, and program leadership, the engineer implements automated DevSecOps practices across development, test, staging, and production environments. The work supports cloud-native applications, Java microservices, containerized workloads, and enterprise integration platforms while addressing security and configuration management requirements. The position supports the modernization of systems used in citizenship and visa processing for the USCIS mission. The role is remote, requires a minimum Public Trust clearance to start, and is open to U.S. citizens. No travel is required.

Requirements

Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent relevant professional experience; the posting also specifies 10+ years of total experience in the field.
At least three years of experience developing, maintaining, or supporting CI/CD pipelines and DevOps automation.
Demonstrated experience with one or more CI/CD platforms, such as Jenkins, Harness, GitLab CI/CD, or GitHub Actions.
Experience with source control systems, particularly Git.
Proficiency in scripting and automation using Python, Bash, PowerShell, or Groovy.
Experience with Docker, Kubernetes, container registries, and automated application deployments.
Understanding of software builds, automated testing, version control, release management, and configuration management.
Experience integrating code quality tools and automated security scanning into software delivery workflows.
Strong troubleshooting, analytical, documentation, and communication skills.
U.S. citizenship.
Ability to obtain a minimum Public Trust clearance to start.

Nice To Haves

Experience with AWS cloud services and Amazon EKS.
Experience developing Harness pipelines, reusable templates, service and environment configurations, and deployment orchestration.
Familiarity with SonarQube, Twistlock/Prisma Cloud, or comparable code quality and security tools.
Experience with infrastructure as code using Terraform, CloudFormation, or comparable technologies.
Familiarity with observability platforms such as New Relic, CloudWatch, or comparable monitoring solutions.
Experience supporting Java, REST APIs, and microservice architectures.
Experience supporting federal government IT programs and security compliance requirements, including NIST SP 800-53, FISMA, and RMF.
Experience supporting production systems with stringent availability, auditability, and change-control requirements.

Responsibilities

Design, develop, configure, and maintain CI/CD pipelines for enterprise applications, microservices, automated tests, and infrastructure builds.
Implement and optimize workflows for builds, unit and integration testing, code quality analysis, artifact publishing, and deployment.
Develop reusable pipeline templates, shared libraries, deployment scripts, and automation components.
Troubleshoot pipeline failures, build errors, deployment issues, and configuration inconsistencies.
Integrate automated security testing, including SAST, SCA, container image scanning, and vulnerability assessments, into pipelines.
Enforce security gates, code quality thresholds, and approval requirements for promotion between environments.
Support remediation of security vulnerabilities, software dependencies, and container image findings.
Maintain pipeline configurations and deployment processes in line with organizational policies, NIST SP 800-53, RMF, and federal cybersecurity requirements.
Support audit readiness with pipeline logs, deployment records, traceability, and documented release approvals.
Support containerized deployments using Docker and Kubernetes, including Amazon EKS.
Integrate pipelines with cloud services, infrastructure automation, container registries, and environment configuration management.
Implement appropriate automated deployment strategies, such as rolling deployments, blue-green deployments, and rollback procedures.
Collaborate with cloud and infrastructure teams to resolve environment, networking, access, and deployment issues.
Manage source control workflows, branching strategies, versioning, artifact repositories, and release tagging.
Implement environment promotion controls across development, test, staging, and production.
Maintain pipeline documentation, operational procedures, troubleshooting guides, and technical standards.
Monitor pipeline performance and identify ways to reduce deployment time, improve reliability, and increase automation.
Work with cybersecurity, quality assurance, architecture, and operations teams to address delivery and compliance issues.
Provide developers with technical guidance on pipeline usage, deployment standards, and DevSecOps practices.
Identify improvements to delivery performance, pipeline reuse, operational consistency, and release quality.