DEVSECOPS ENGINEER

Liberty It Solutions

Full-time

Remote

Professional, Scientific, and Technical Services

About the position

The DevSecOps Engineer plays a critical role in ensuring the security and efficiency of the client's IT operations and infrastructure. This position requires a deep understanding of IT operations management, security architectures, cybersecurity, and risk assessment techniques to identify and eliminate security vulnerabilities within the network and IT systems. The DevSecOps Engineer is tasked with scaling the DevSecOps culture and enhancing technical capabilities within the organization. This involves aligning with the Scaled Agile Framework (SAFe) and representing a System Team approach, which is essential for the development and maintenance of the toolchain that supports the Continuous Integration/Continuous Deployment (CI/CD) Pipeline. In this role, the DevSecOps Engineer will implement Liberty's DevSecOps Maturity Assessment Model and collaborate with key stakeholders, including the "Big Six" and Infrastructure Operations (IO), to address deployment bottlenecks and accelerate delivery across Program Teams (PTs) using the Software Factory. Additionally, the engineer will support various security activities, including Assessment and Authorization, and will be responsible for creating process efficiencies by consolidating DevSecOps requirements to generate program-level efficiencies. This position also requires a forward-thinking approach to understanding future state DevSecOps requirements and providing shared technologies for system integration. The role allows for remote work, providing flexibility while ensuring that the engineer can effectively contribute to the organization's security posture and operational efficiency. The ideal candidate will possess a strong educational background, with a Bachelor's degree in computer science, electronics engineering, or a related technical discipline, while a Master's degree is preferred. A minimum of eight years of relevant experience is required, or ten years of additional relevant experience may be substituted for education.

Responsibilities

• Design and develop IT architecture.
• Create diagrams and documentation for all components of IT systems, including network topology.
• Conduct technical requirements analysis.
• Create secure and scalable software development plans, strategies, and architectures.
• Perform requirements analysis to determine security needs for complex software, systems, components, and networks.
• Design software tools and subsystems to support the integration of security products into a secure IT enterprise environment.
• Interface with clients to determine present and future secure network needs and design complex network architecture to meet those requirements.
• Design and implement test and evaluation processes for security and resolve complex integrity issues.
• Provide guidance to less experienced secure systems/software engineers.
• Oversee the development team and manage the full life cycle of the software development process.

Requirements

• Bachelor's Degree in computer science, electronics engineering, or other engineering or technical discipline required; Master's preferred.
• 8 years of relevant experience, or 10 years of additional relevant experience may be substituted for education.
• Extensive experience in the design and development of Client Server and Web Enabled Corporate applications, including network topology.
• Well-versed in Object Oriented tools and techniques.
• Thorough knowledge of data modeling skills using automated tools.
• Experience in creating and conveying architectural vision for programs or projects.
• Experience in establishing and enforcing standards and practices.
• Extensive software development experience and thorough knowledge of various programming languages and logic.
• Knowledge of software development and user interface web applications.
• Familiarity with Agile frameworks and regression testing is a plus.
• Familiarity with design/architectural patterns (e.g., Model-View-Controller (MVC)).
• Familiarity with architecture styles/APIs (REST, RPC).
• Excellent analytical and organizational skills.
• Ability to understand front-end users' requirements and possess a problem-solving attitude.
• Excellent verbal and written communication skills.
• International Information System Security Certification Consortium (ISC)2 (Certified Information System Security Professional).
• AWS Solutions Architect (Associate) or Developer (Associate) or MAG Azure Solutions Architect (Associate) or Azure Developer (Associate).
• 3 or more years of experience in translating NIST SP 800-53 security controls into actionable application security mechanisms.
• 1 or more years of experience in overseeing implementation of cybersecurity within the CI/CD pipeline.
• Ability to obtain a clearance with the U.S. Government.

Nice-to-haves

• CMMI Maturity Level 3, ISO 9001:2015 or 9001:2001, and ITIL experience.
• High standards, results-oriented, and a commitment to delivering high-quality software on time.