DevSecOps Engineer

Systems Engineering Solutions Corporation•Washington, DC

19h

About The Position

This position focuses on creating and modifying pipelines using GitHub Enterprise Cloud repositories. The role requires expertise in developing and maintaining pipelines using Jenkins servers and troubleshooting deployment issues. Candidates should incorporate metrics such as Mean Time To Build (MTTB) and Mean Time To Deploy (MTTD). Experience with multiple CI/CD tools, Git Actions, and code scanning tools like CodeQL, Fortify, SonarQube, and Nexus is desired. Familiarity with automation tools such as Selenium, Cucumber, Maven, and AWS CodeBuild/CodeDeploy is advantageous.

Requirements

2+ years of experience
Bachelor’s degree
Technical / Tools Strong hands-on experience building and maintaining CI/CD pipelines with Jenkins.
Experience creating and modifying pipelines integrated with GitHub Enterprise Cloud repositories.
Proven ability to troubleshoot build and deployment issues across CI/CD workflows.
Ability to define, track, and improve pipeline performance using metrics like MTTB and MTTD.
Understanding of CI/CD best practices: pipeline-as-code, artifact management, environment promotion, rollback considerations.
Engineering Fundamentals
Solid understanding of source control workflows (branching, pull requests, merge strategies).
Scripting/automation capability (e.g., Bash/PowerShell or similar) to support pipeline tasks and troubleshooting.
Familiarity with dependency/build tooling (e.g., Maven) and packaging concepts.
Problem-solving & Analytical Thinking: Quickly isolate pipeline failures, identify root causes, and implement lasting fixes.
Communication: Clearly explain technical issues and solutions to both technical and non-technical stakeholders.
Collaboration: Partner effectively with developers, QA, security, and operations teams to improve delivery outcomes.
Ownership & Accountability: Proactively monitor pipeline health and drive continuous improvement without waiting for escalation.
Attention to Detail: Ensure pipelines are reliable, repeatable, secure, and properly versioned/documented.
Adaptability: Comfortable working across multiple tools and evolving delivery standards.

Nice To Haves

CI/CD Ecosystem Breadth Experience with multiple CI/CD tools beyond Jenkins (e.g., GitHub Actions and other enterprise CI/CD platforms).
Hands-on experience with GitHub Actions workflow development and maintenance.
Security & Quality Tooling Experience: integrating and managing code scanning tools: CodeQL, Fortify, SonarQube Experience with artifact repositories and governance: Nexus (repository management, promotion, retention, access patterns)
Cloud & Deployment Automation Familiarity with AWS-native CI/CD services such as: AWS CodeBuild and AWS CodeDeploy.
Experience designing pipelines that deploy to cloud environments and handle environment configuration and secrets safely.
Test Automation Familiarity with automated testing frameworks/tools: Selenium, Cucumber
Ability to improve test stages, reduce flakiness, and optimize execution time in pipelines.

Responsibilities

CI/CD Pipeline Engineering Design, implement, and maintain CI/CD pipelines aligned to team and program delivery practices.
Create and modify pipeline definitions and workflows tied to GitHub Enterprise Cloud repositories.
Develop and maintain pipeline jobs and shared libraries on Jenkins (pipelines-as-code, scripted/declarative approaches as applicable).
Standardize pipeline patterns and reusable templates to reduce duplication and improve maintainability.
Deployment Troubleshooting & Operational Support Diagnose and resolve build failures, deployment issues, and environmental inconsistencies across lower and higher environments.
Perform root cause analysis (RCA) and implement corrective actions to prevent recurring failures.
Partner with engineering, QA, security, and platform teams to remediate pipeline blockers and streamline deployments.
DevSecOps Metrics & Continuous Improvement Instrument and report delivery metrics including MTTB and MTTD; identify bottlenecks and implement improvements.
Monitor pipeline performance (queue time, build duration, failure rates, flaky tests) and drive optimization.
Improve automation coverage and reduce manual steps through pipeline enhancements.
Security & Code Quality Integration (“Shift Left”) Integrate code scanning and quality gates into pipelines using tools such as: CodeQL, Fortify, SonarQube, and artifact/repository controls like Nexus Ensure pipelines enforce consistent security and quality checks prior to merge/release.
Collaborate with security stakeholders to tune scanning thresholds, manage findings, and support remediation workflows.
Automation Enablement Implement or enhance automation steps using tools such as: Selenium, Cucumber, Maven Support automated build/test/deploy stages and improve feedback loops to developers.
Documentation & Enablement Document pipeline standards, usage guides, and operational runbooks.
Provide guidance and mentoring to teams on CI/CD best practices, branching strategies, and pipeline troubleshooting.