DevSecOps Engineer - Onsite in Woburn, MA

Booker Dimaio - Lexington, MA

Full-time - Senior

Remote - Lexington, MA

Professional, Scientific, and Technical Services

About the position

The Senior DevSecOps Engineer will lead and manage complex software development operations at our Lexington, MA facility. This hybrid role requires candidates to work onsite 3-4 days a week and involves setting up and managing the development environment, configuring cloud services, and overseeing CI/CD pipelines. The position emphasizes compliance, security controls, and continuous improvement of development processes.

Responsibilities

• Provide leadership in applying DevSecOps concepts, processes, and tools to help plan and define capabilities to support operations.
• Support digital engineering strategy and governance development and implementation.
• Analyze user needs, concept of operations, and high-level system architecture to develop system requirements.
• Identify and communicate risks, issues, opportunities, assumptions, mitigations, and dependencies.
• Lead complex projects that require both on-prem and in-depth cloud solution integration.
• Organize and lead sprint planning events ensuring stakeholder needs are prioritized.
• Operate as a strategic advisor and apply hands-on experience to consult in the design, build, and maintain continuous integration (CI)/continuous delivery (CD) pipelines.
• Apply automated testing tools to automate testing.
• Guide the design, build and maintenance of CI/CD pipelines in multiple integration and test (I&T) environments.
• Install, configure, and manage automated testing tools in the environment.

Requirements

• 6+ years of experience working in Software Development support.
• 3+ years as a DevSecOps Engineer or equivalent.
• 2+ years of experience with CI/CD orchestrator tools (e.g., Jenkins, Gitlab, Maven, Ant).
• Experience with containerization technologies (e.g., Docker, Kubernetes).
• Experience with configuration management tools (e.g., Git, GitHub, GitLab, Bitbucket).
• Experience with Atlassian JIRA or other defect tracking tools.
• Experience with Atlassian Confluence, GitLab/GitHub, Jenkins, and artifact repository.
• Experience with at least one configuration/deployment management system (e.g., Chef, Puppet, Ansible, AWS Cloud Formation).
• Program lifecycle experience from concept development and design to deployment, operations, and maintenance, decommission.
• Strong experience working with Agile and DevSecOps principles.

Nice-to-haves

• Knowledge of Cloud technologies (e.g., AWS, Azure).
• Familiarity with security tools and technologies such as static code analysis, vulnerability scanners, intrusion detection/prevention systems, and SIEM solutions.
• Excellent communication and problem-solving skills.