Software Engineer SME DevSecOps & Artifact Management TS/SCI
About The Position
GCA is seeking a Software Engineer Subject Matter Expert specializing in DevSecOps, artifact management, and secure software development to support the Naval Criminal Investigative Service (NCIS) in Quantico, Virginia. The role focuses on migrating mission-critical applications to a secure software development toolchain while meeting Department of the Navy Chief Information Officer (DON-CIO) policies and security requirements. The SME will provide technical expertise, guidance, and hands-on support to development teams to improve code quality, strengthen software supply-chain security, and establish sustainable secure-development practices. The position has a hybrid schedule, with onsite support approximately 1–2 days per week or as mission requirements dictate. The employee must reside within commuting distance of Quantico, Virginia, and be available for onsite support as required.
Requirements
- Active Top Secret clearance with SCI access.
- At least 10 years of relevant technical experience with a high school diploma, or commensurate experience.
- Expert-level experience with secure software development and DevSecOps principles across full-stack application environments.
- Expertise with artifact management platforms such as Nexus, Artifactory, NuGet, or comparable technologies.
- Experience implementing and supporting SAST/DAST and code-quality platforms such as SonarQube, Aikido, CodeQL, or similar tools.
- Strong knowledge of secure coding practices, software dependency management, software supply-chain security, and SBOM requirements.
- Experience implementing Git-based development workflows, including branch-protection policies, pre-commit hooks, and code-management practices.
- Experience with relational and NoSQL databases and application development across compiled and interpreted programming languages.
- Understanding of Zero Trust principles and their application to secure software development.
- Ability to apply software engineering and security principles across multiple operating systems, programming languages, and hosting environments.
- Strong analytical, troubleshooting, and problem-solving skills.
- Ability to provide technical guidance and mentorship to software development teams.
- Must reside within commuting distance of Quantico, Virginia, and be available for onsite support as required.
Nice To Haves
- Experience supporting Department of Defense or Department of the Navy software development environments.
- Familiarity with DON-CIO secure software development policies.
- Experience supporting application modernization and migration to secure development toolchains.
- Experience establishing or improving enterprise DevSecOps processes and development security standards.
- Experience supporting software development initiatives within classified government environments.
Responsibilities
- Provide technical expertise and guidance while migrating mission applications to secure software development toolchains and environments.
- Implement and support DevSecOps practices across the software development lifecycle, ensuring compliance with applicable Department of the Navy cybersecurity policies.
- Configure, maintain, and optimize software artifact management platforms such as Nexus, JFrog Artifactory, and NuGet.
- Support secure coding practices, application security standards, and software supply-chain security initiatives.
- Implement and manage SAST and DAST capabilities using tools such as SonarQube, Aikido, and CodeQL.
- Support SBOM development, dependency management, vulnerability identification, and remediation processes.
- Implement secure Git-based development workflows, including branch management rules, pre-commit hooks, and code-quality controls.
- Provide technical guidance on Zero Trust principles and their application to software development environments.
- Evaluate application security and software engineering practices across relational and NoSQL databases, compiled and interpreted programming languages, and diverse operating systems.
- Collaborate with software developers, cybersecurity personnel, and technical teams to integrate security controls into development processes.
- Identify security weaknesses, code-quality issues, and software-development risks, and recommend corrective actions.
- Mentor and guide development teams to promote consistent adoption of secure software development standards and best practices.
Benefits
- Competitive compensation
- Paid time off, including 10 federal holidays and 15 additional days
- Bereavement leave
- Parental leave
- PTO cash out
- Company-paid short-term and long-term disability insurance
- Life and AD&D insurance
- Medical and prescription coverage
- Dental insurance
- Vision insurance
- 401(k) savings plan with company match
- Employee referral program
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
High school or GED
