DevSecOps Engineer

Maximus

48d•$120,000 - $160,000•Onsite

About The Position

Maximus is seeking a DevSecOps Engineer to support a federal client and mission-critical systems in defense of the Homeland. The engineer will integrate security practices throughout the software development lifecycle while improving system reliability, automation, and security. This is an on-site role in Colorado Springs, Colorado, requiring an active Secret clearance and U.S. citizenship. Candidates must live within commuting distance and be able to meet on-call and recall requirements for systems that require 24x7x365 uptime. The role focuses on Infrastructure as Code, DevSecOps tools, CI/CD, code quality, security, monitoring, automated configuration management, and secure infrastructure operations. The engineer will use Chef and Ansible automation, Ansible Satellite, VMware vSphere and vCenter, HashiCorp Vault, and related tools to maintain reliable, compliant infrastructure. The position also involves securing and deploying code, developing containerized applications and microservices, collaborating across teams, and mentoring junior engineers. A one-week-per-month on-call rotation is required.

Requirements

Active Secret clearance.
U.S. citizenship is required due to federal, agency, and contract requirements.
12 or more years of experience as a DevSecOps Engineer or in a related field.
Daily hands-on experience reviewing, updating, and creating Chef cookbooks.
Experience with Chef, Chef Automate, and Chef Ruby for configuration management and infrastructure automation.
Experience developing, maintaining, and executing Ansible playbooks for automation, configuration management, and deployment.
Experience with Ansible Satellite for system management, patching, configuration enforcement, and compliance support.
Experience with VMware vSphere and vCenter for virtual infrastructure management, provisioning, and automation.
Knowledge of HashiCorp Vault for secrets management, credential lifecycle management, and secure application and infrastructure integration.
Experience with one or more of Docker Enterprise, Splunk, Chef, Chef Automate, Chef Ruby, Puppet, Ansible, Ansible Satellite, Kubernetes, OpenShift, VMware vSphere, or VMware vCenter.
Hands-on experience with Terraform, Jenkins Groovy scripts, and Python.
Residence within commuting distance for daily on-site work and on-call requirements.
Willingness and ability to meet recall requirements and participate in a rotational on-call schedule supporting 24x7x365 systems.

Responsibilities

Develop automated solutions involving Infrastructure as Code, DevSecOps tools, CI/CD, code quality, security, and monitoring.
Review, update, and create Chef cookbooks to support configuration management, infrastructure consistency, and secure deployments.
Develop, maintain, and execute Ansible playbooks for configuration management, provisioning, application deployment, and operational tasks.
Use Ansible Satellite for automated patching, configuration enforcement, system lifecycle management, and compliance activities.
Support virtualization and infrastructure operations using VMware vSphere and vCenter, including virtual machines, templates, snapshots, resource allocation, and environment automation.
Support and maintain Chef automation, including Chef Automate and Chef Ruby, to provide repeatable, reliable, and compliant configurations.
Apply HashiCorp Vault knowledge to secrets management, credential storage, access control, and integration with deployment workflows.
Ensure infrastructure, services, and applications meet security, monitoring, performance, and service-level standards.
Release production code and develop Platform as a Service and Software as a Service solutions.
Collaborate with development, operations, and cross-functional teams to design, implement, and maintain secure automated infrastructure that complies with applicable security and regulatory requirements.
Apply software-development lifecycle security practices, including code scanning, vulnerability assessment, threat modeling, static and dynamic analysis, and security testing.
Develop and maintain CI/CD pipelines for continuous integration, delivery, and deployment.
Develop and maintain containerized applications and microservices.
Automate and orchestrate security processes, including incident response and threat detection, using technologies such as Splunk, Chef Automate, and Ansible.
Participate in a one-week-per-month on-call rotation for emergency page-outs, incident response, and operational needs.
Keep current with DevSecOps trends, tools, and practices and recommend appropriate technologies.
Provide mentorship and guidance to junior engineers on DevSecOps practices and techniques.