DecSecOps Engineer (W2 Position) - Remote

Position Title: DecSecOps Engineer

PLACEMENT TYPE: 6 Months contract to hire

LOCATION: Alexandria, VA 22314

Tele Commute: Yes, can be fully remote; but must be available for scrum meetings on EST.

Work Authorization Required: USC/GC (Must have been a permanent resident in the US for the last 2 years minimum.)

CLEARANCE REQUIREMENT: Public Trust

Job Description:

We are seeking a passionate and skilled Senior DevSecOps Engineer to join our high-performing development team. You will design, implement, and maintain Mid-large scale, complex Java-based applications in a fast-paced, dynamic environment. Your proficiency in Java development and adherence to best practices will ensure the delivery of high-quality, scalable, and efficient software solutions. You will collaborate with product managers, architects, and cross-functional teams to understand requirements and deliver solutions aligning with client objectives and goals.

• Experience working with scanning tools to support SAST, DAST
• Proficiency in scripting languages (e.g., Python, Bash) and coding skills to write automation scripts and integrate security tools into the CI/CD pipeline.
• In-depth knowledge of cloud platforms like AWS, Azure, or GCP
• Familiarity with cloud security best practices for popular cloud platforms (e.g., AWS, Azure, GCP).
• Proven leadership experience, including managing and mentoring development teams.
• The ability to define and drive the technical strategy and architecture for projects.
• Expertise in Agile software development methodologies and the ability to lead and coach Agile teams.
• Strong problem-solving skills, especially in diagnosing and resolving complex technical issues.
• Understanding of DevOps concepts, principles, and practices, including continuous integration and continuous delivery (CI/CD).
• Proficiency in DevOps and automation tools, such as Git, Jenkins, Docker, Kubernetes, Ansible, and Terraform
• Ability to assess and prioritize security risks and vulnerabilities and develop mitigation strategies.
• Strong collaboration and communication skills to work closely with development, operations, and security teams
• Experience in designing microservices-based architectures.
• Knowledge of RESTful API design and development
• Ability to design, deploy, and manage cloud-based applications and services.
• Skills in designing and architecting complex software systems using modern best practices.

Required Qualifications and Skills:

• BA/BS degree and 10 years relevant experience or MA/MS degree or higher and 8 years relevant experience
• Experienced in the development of end-to-end solutions supporting deployments across multiple environments.
• Familiar with various branching strategies.
• Over 10 Years of Functional experience supporting DevOps/DevSecOps to reengineer and automate the software development process.
• To effectively support various teams, the candidate should have 10 years of experience in DevOps pipeline tools and technologies, including Jenkins, Ansible, Nexus RM/IQ, SonarQube, Docker, Gitlab CI/CD, Flexera AppPortal, Maven, Splunk, Cloudforms, Puppet and Kubernetes.
• At least 8 years hands-on experience
• Able to demonstrate in-depth technical expertise in DevSecOps techniques, continuous integration, continuous testing, and continuous deployment.
• Capable of implementing automated methods that improve the performance and reliability of the system including scripting, integration, and problem resolution related to the CI/CD pipeline tool chain.
• Experience provisioning and managing resources within IaaS/Cloud infrastructures (e.g., Azure, AWS, Google Cloud Platform, etc.).
• AWS experience and certification
• Experience with the NIST family of Information Security-related publications including 800-37, 800-53 and OMB Circular A-130
• Experience with at least some of the following technologies and techniques: CI/CD, Java, Python, JavaScript, Agile/Scrum/Kanban, Configuration Management, Test Automation, Test Driven Development, Behavior Driven testing, DevSecOps Collaboration, Rally, Gradle, AWS, Terraform, Apache Ant, Apache Jmeter, Azure
• Must be able to obtain Public Trust through the USPTO

Desired Qualifications and Skills:

• Experience developing and/or integrating with Artificial Intelligence (ML, NLP, etc.) models is a plus.

Nice to have:

• Experience developing and deploying applications using various cloud native tools and services