DevSecOps Engineer

Maximus is seeking a DevSecOps Engineer to provide expertise to a federal client in support of mission-critical systems in defense of our Homeland. As a key member of the team, the DevSecOps Engineer will integrate security practices throughout the software development lifecycle while advancing the reliability, automation, and security of mission-critical systems.

This role is on-site in Colorado Springs, CO and requires an active Secret clearance.

Maximus TCS (Technology and Consulting Services) Internal Job Profile Code: TCS088, T4, Band 7

Job-Specific Essential Duties and Responsibilities:

• Innovate and develop cutting-edge solutions through automation, including Infrastructure as Code, DevSecOps tools, CI/CD, code quality, security, and monitoring.

• Review, update, and create Chef cookbooks daily to support automated configuration management, infrastructure consistency, and secure system deployments.

• Develop, maintain, and execute Ansible playbooks to automate configuration management, system provisioning, application deployment, and operational tasks.

• Use Ansible Satellite to support automated patching, configuration enforcement, system lifecycle management, and infrastructure compliance activities.

• Support virtualization and infrastructure operations using VMware vSphere and vCenter, including virtual machine, template, snapshot, resource allocation, and environment automation activities.

• Support and maintain Chef-based automation, including Chef Automate and Chef Ruby, to ensure repeatable, reliable, and compliant infrastructure configurations.

• Apply knowledge of HashiCorp Vault to support secure secrets management, credential storage, access control, and integration with automated deployment workflows.

• Ensure infrastructure, services, and applications meet security, monitoring, performance, and service-level standards.

• Release production code and develop Platform as a Service and Software as a Service solutions.

• Collaborate with development, operations, and cross-functional teams to design, implement, and maintain secure, automated infrastructure that complies with applicable security standards and regulatory requirements.

• Implement security best practices throughout the software development lifecycle, including code scanning, vulnerability assessment, threat modeling, static and dynamic analysis, and security testing.

• Develop and maintain CI/CD pipelines that enable continuous integration, continuous delivery, and continuous deployment.

• Develop and maintain containerized applications and microservices.

• Automate and orchestrate security processes, including incident response and threat detection, using technologies such as Splunk, Chef Automate, and Ansible.

• Participate in a one-week-per-month on-call rotation to support emergency page-outs, incident response, and mission-critical operational needs.

• Stay current with emerging DevSecOps trends, tools, and practices and recommend appropriate new technologies.

• Provide mentorship and guidance to junior engineers on DevSecOps practices and techniques.

Job-Specific Minimum Requirements:

• Active Secret clearance.

• Due to federal, agency, and contract requirements, candidates must be U.S. citizens.

• 12+ years of experience as a DevSecOps Engineer or in a related field.

• Daily hands-on experience reviewing, updating, and creating Chef cookbooks.

• Experience with Chef, Chef Automate, and Chef Ruby for configuration management and infrastructure automation.

• Experience developing, maintaining, and executing Ansible playbooks for automation, configuration management, and deployment activities.

• Experience with Ansible Satellite for system management, patching, configuration enforcement, and compliance support.

• Experience with VMware vSphere and vCenter for virtual infrastructure management, provisioning, and automation.

• Knowledge of HashiCorp Vault for secrets management, credential lifecycle management, and secure application and infrastructure integration.

• Experience with one or more of the following: Docker Enterprise, Splunk, Chef, Chef Automate, Chef Ruby, Puppet, Ansible, Ansible Satellite, Kubernetes, OpenShift, VMware vSphere, or VMware vCenter.

• Hands-on experience with Terraform, Jenkins Groovy scripts, and Python.

• Candidates must reside within a commutable distance for daily onsite work and on-call requirements.

• This contract supports systems that require 24x7x365 uptime. Candidates must be willing and able to meet recall requirements, including participation in a rotational on-call schedule.

#techjobs #clearance #veteransPage #APPCASTDTO

Minimum Requirements

TCS088, T4, Band 7

Maximus is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, age, national origin, disability, veteran status, genetic information and other legally protected characteristics.

Minimum Salary

$120,000

Maximum Salary

$140,000