DevSecOps Engineer

MAXIMUS, Inc.•Annapolis Junction, MD

40d•Onsite

About The Position

Maximus is seeking a DevSecOps Engineer to provide expertise to a federal client in support of their mission critical systems in defense of our Homeland. As a key member of our team, the DevSecOps Engineer will play a pivotal role in integrating security practices into the software development lifecycle and ensuring the reliability and security of mission-critical systems. This is an on-site position that requires a Secret Clearance. Maximus TCS (Technology and Consulting Services) Internal Job Profile Code: TCS087, T3, Band 6

Requirements

8+ years of experience as a DevSecOps Engineer or related field.
Active Secret clearance.
Due to federal requirements, all candidates must be US Citizens without Dual Citizenship to another country.
This is an on-site position at a government facility.
Requires presence on-site five days per week in Annapolis Junction, MD.
Candidates must reside within a commutable distance.
Participation in a rotational on-call schedule for emergency page-outs is required.
Experience in any or all the following: Docker Enterprise, Splunk, Chef, Chef Automate, Chef (Ruby), Puppet, Ansible, Kubernetes, Openshift
Hands-on working experience in Terraform (IaC), Jenkins groovy scripts, and Python.

Responsibilities

Innovate, and develop cutting edge solutions through automation - IaC (Infrastructure as code), DevSecOps tools (CICD, Code quality, security, and monitoring).
Ensure the infrastructure, services, and applications developed meets all standards including security, monitoring, performance, and SLAs.
Demonstrable experience releasing production code and developing PaaS/SaaS
Collaborate with development and operations teams to design, implement, and maintain secure and automated infrastructure.
Implement security best practices throughout the software development lifecycle (SDLC), including code scanning, vulnerability assessment, and threat modeling.
Develop and maintain CI/CD pipelines, enabling continuous integration, continuous delivery, and continuous deployment of applications.
Develop and maintain containerization and micro-services.
Integrate security controls, such as automated vulnerability scanning, static and dynamic analysis, and security testing, into the CI/CD process.
Collaborate with cross-functional teams to ensure compliance with security standards and regulatory requirements.
Automate and orchestrate security processes, including incident response and threat detection, using technologies like Splunk, Chef Automate, and others.
Stay updated with emerging DevSecOps trends, tools, and practices, and provide recommendations for implementing new technologies.
Provide mentorship and guidance to junior engineers in DevSecOps practices and techniques.
Other additional duties as needed.