DevSecOps Engineer

Systems Engineering Solutions Corporation•Washington, DC

About The Position

This program provides IT services focused on building, securing, and operating the Department of Veteran Affairs LGY’s home loan product-line technology. The contract’s purpose is to modernize and sustain critical home loan technology systems that support LGY’s delivery of mortgage-related services to program stakeholders, to provide continuous delivery and security integration. This position focuses on creating and modifying pipelines using GitHub Enterprise Cloud repositories. The role requires expertise in developing and maintaining pipelines using Jenkins servers and troubleshooting deployment issues. Candidates should incorporate metrics such as Mean Time To Build (MTTB) and Mean Time To Deploy (MTTD). Experience with multiple CI/CD tools, Git Actions, and code scanning tools like CodeQL, Fortify, SonarQube, and Nexus is desired. Familiarity with automation tools such as Selenium, Cucumber, Maven, and AWS CodeBuild/CodeDeploy is advantageous.

Requirements

2+ years of experience
Bachelor’s degree
Technical / Tools Strong hands-on experience building and maintaining CI/CD pipelines with Jenkins.
Experience creating and modifying pipelines integrated with GitHub Enterprise Cloud repositories.
Proven ability to troubleshoot build and deployment issues across CI/CD workflows.
Ability to define, track, and improve pipeline performance using metrics like MTTB and MTTD.
Understanding of CI/CD best practices: pipeline-as-code, artifact management, environment promotion, rollback considerations.
Engineering Fundamentals
Solid understanding of source control workflows (branching, pull requests, merge strategies).
Scripting/automation capability (e.g., Bash/PowerShell or similar) to support pipeline tasks and troubleshooting.
Familiarity with dependency/build tooling (e.g., Maven) and packaging concepts.

Nice To Haves

CI/CD Ecosystem Breadth Experience with multiple CI/CD tools beyond Jenkins (e.g., GitHub Actions and other enterprise CI/CD platforms).
Hands-on experience with GitHub Actions workflow development and maintenance.
Security & Quality Tooling Experience: integrating and managing code scanning tools: CodeQL, Fortify, SonarQube Experience with artifact repositories and governance: Nexus (repository management, promotion, retention, access patterns)
Cloud & Deployment Automation Familiarity with AWS-native CI/CD services such as: AWS CodeBuild and AWS CodeDeploy.
Experience designing pipelines that deploy to cloud environments and handle environment configuration and secrets safely.
Test Automation Familiarity with automated testing frameworks/tools: Selenium, Cucumber
Ability to improve test stages, reduce flakiness, and optimize execution time in pipelines.

Responsibilities

CI/CD Pipeline Engineering Design, implement, and maintain CI/CD pipelines aligned to team and program delivery practices.
Create and modify pipeline definitions and workflows tied to GitHub Enterprise Cloud repositories.
Develop and maintain pipeline jobs and shared libraries on Jenkins (pipelines-as-code, scripted/declarative approaches as applicable).
Standardize pipeline patterns and reusable templates to reduce duplication and improve maintainability.
Deployment Troubleshooting & Operational Support Diagnose and resolve build failures, deployment issues, and environmental inconsistencies across lower and higher environments.
Perform root cause analysis (RCA) and implement corrective actions to prevent recurring failures.
Partner with engineering, QA, security, and platform teams to remediate pipeline blockers and streamline deployments.
DevSecOps Metrics & Continuous Improvement Instrument and report delivery metrics including MTTB and MTTD; identify bottlenecks and implement improvements.
Monitor pipeline performance (queue time, build duration, failure rates, flaky tests) and drive optimization.
Improve automation coverage and reduce manual steps through pipeline enhancements.
Security & Code Quality Integration (“Shift Left”) Integrate code scanning and quality gates into pipelines using tools such as: CodeQL, Fortify, SonarQube, and artifact/repository controls like Nexus Ensure pipelines enforce consistent security and quality checks prior to merge/release.
Collaborate with security stakeholders to tune scanning thresholds, manage findings, and support remediation workflows.
Automation Enablement Implement or enhance automation steps using tools such as: Selenium, Cucumber, Maven Support automated build/test/deploy stages and improve feedback loops to developers.
Documentation & Enablement Document pipeline standards, usage guides, and operational runbooks.
Provide guidance and mentoring to teams on CI/CD best practices, branching strategies, and pipeline troubleshooting.