System Database Developer - SecDevOps

Gunnison Consulting Group • Bethesda, MD

3d • $130,000 - $145,000 • Hybrid

About The Position

This position is contingent upon a future opening with Gunnison. The role involves designing, developing, maintaining, and securing enterprise applications, databases, automation workflows, and supporting infrastructure for NIH CIT systems and services. A key aspect of this position is implementing Secure DevOps (SecDevOps) practices throughout the software-development lifecycle, integrating security requirements into all phases from planning to maintenance. The developer will also be responsible for developing and maintaining CI/CD pipelines, building and enhancing database solutions, applying secure-coding standards, supporting secure application and database design, identifying and remediating vulnerabilities, implementing infrastructure-as-code, supporting containerized and cloud-native environments, implementing security monitoring, and ensuring compliance with federal cybersecurity requirements. Collaboration with various teams and the development of technical documentation are also crucial components of this role.

Requirements

• Minimum of three (3) to five (5) years of progressively responsible experience in systems development, database development or administration, DevOps, cloud engineering, software engineering, security engineering, or a closely related technical discipline.
• Experience in developing, administering, optimizing, or securing enterprise database platforms, preferably SQL Server, Oracle, PostgreSQL, MySQL, or equivalent.
• Experience writing SQL, stored procedures, functions, scripts, data-integration logic, and performance-tuning queries.
• Experience with software development using one or more languages such as Python, PowerShell, Java, C#, JavaScript/TypeScript, Bash, or similar languages.
• Experience building or supporting CI/CD pipelines and source-code management using Git and one or more DevOps platforms.
• Experience with secure-coding practices, code review, application-security testing, vulnerability remediation, and software dependency management.
• Experience with cloud, hybrid-cloud, container, virtualization, or infrastructure-as-code environments.
• Experience with database security, including role-based access control, privileged-access management, encryption, audit logging, backup/recovery, and vulnerability remediation.
• Experience implementing or supporting NIST RMF, NIST SP 800-53 controls, secure configuration baselines, patch management, continuous monitoring, or federal cybersecurity compliance activities.
• Experience working in Agile/DevSecOps delivery teams and communicating technical risks, work status, and remediation recommendations to stakeholders.
• Bachelor’s degree from an accredited college or university in cybersecurity, computer science, information systems, software engineering, computer engineering, database administration, data management, cloud computing, network engineering, or a closely related technical discipline.
• Security+ or equivalent baseline cybersecurity certification
• One relevant technical certification in cloud, database, DevOps, or secure software development
• Ability to obtain and maintain a Public Trust.

Nice To Haves

• Master’s degree in cybersecurity, computer science, software engineering, information systems, data science, database technologies, cloud computing, systems engineering, or a related technical discipline.
• Other relevant cybersecurity, cloud, database, DevSecOps, or secure software-development certifications.

Responsibilities

• Design, develop, maintain, and secure enterprise applications, databases, automation workflows, and supporting infrastructure for NIH CIT systems and services.
• Implement Secure DevOps (SecDevOps) practices throughout the software-development lifecycle, integrating security requirements into planning, design, development, testing, deployment, operations, and maintenance.
• Develop and maintain CI/CD pipelines using tools such as Azure DevOps, Jenkins, GitLab CI/CD, GitHub Actions, AWS CodePipeline, or comparable platforms.
• Build, maintain, and enhance database solutions using technologies such as Microsoft SQL Server, Oracle, PostgreSQL, MySQL, MongoDB, or other enterprise database platforms.
• Develop database objects and code, including schemas, tables, views, stored procedures, functions, triggers, queries, scripts, and data-integration processes.
• Apply secure-coding standards and remediate findings from static application security testing (SAST), dynamic application security testing (DAST), software-composition analysis (SCA), container scanning, infrastructure-as-code scanning, and manual code review.
• Support secure application and database design, including authentication, authorization, privileged access, encryption, secrets management, secure APIs, data masking, logging, auditing, backup, recovery, and high availability.
• Identify, analyze, prioritize, and remediate application, database, cloud, container, operating-system, and infrastructure vulnerabilities in coordination with cybersecurity, system owners, and engineering teams.
• Implement and maintain infrastructure-as-code and configuration-management solutions using tools such as Terraform, Ansible, CloudFormation, ARM/Bicep, Chef, Puppet, or comparable technologies.
• Support containerized and cloud-native application environments using Docker, Kubernetes, OpenShift, AWS, Azure, Google Cloud Platform, or comparable technologies.
• Implement security monitoring, audit logging, and alerting for applications, databases, cloud services, and CI/CD pipelines; support integration with SIEM and vulnerability-management platforms.
• Ensure application, database, and DevOps activities comply with NIH, HHS, and federal cybersecurity requirements, including NIST RMF, NIST SP 800-53, secure development principles, configuration management, continuous monitoring, and vulnerability-management processes.
• Collaborate with developers, database administrators, cloud engineers, cybersecurity engineers, system owners, ISSOs, and program leadership to resolve technical issues and deliver secure solutions.
• Develop and maintain technical documentation, including system designs, data models, database design documents, deployment procedures, runbooks, configuration baselines, security documentation, and SOPs.
• Participate in code reviews, architecture reviews, release planning, sprint activities, change-control processes, incident-response support, disaster-recovery testing, and continuous-improvement initiatives.
• Produce technical status reports, vulnerability-remediation updates, operational metrics, and management briefings as required.

Benefits

• 3 weeks of Personal Leave your first year
• 11 paid Holidays each year
• 5 days of Flexible Time Off each year for approved training or certifications (self-study is ineligible)
• 401(k) company match at 50% up to 10% of your salary
• Medical, Dental and Vision Insurance
• Life and Disability Insurance
• Public Transportation Subsidies
• Certifications and Training Allowance - Up to $5,000/year!

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level