devsecops lead

$156,000 - $176,800/Yr

Randstad - Frederick, MD

Full-time - Mid Level

Remote - Frederick, MD

Administrative and Support Services

About the position

Randstad Federal is seeking a DevSecOps Lead to support a complex, large-scale project at the IRS, focusing on AI integration, low-code/no-code development, and enterprise system integration. The role emphasizes embedding security throughout the development lifecycle while adhering to Agile methodologies and promoting continuous improvement.

Responsibilities

• Lead the implementation of DevSecOps practices across the project, ensuring security is integrated into every stage of the development process
• Collaborate with the Shared Services Team to address security considerations and documentation requirements
• Work closely with the Enterprise Security Audit Trails team to incorporate logging and monitoring capabilities into system integrations
• Coordinate with the API Gateway team to set up secure API endpoints and ensure efficient integration with key applications
• Implement and maintain security controls for data protection, access management, and compliance with federal requirements
• Develop and execute comprehensive security testing plans, including vulnerability assessments and penetration testing
• Provide guidance and support to development teams on security best practices and tools
• Collaborate with the Quality Assurance Lead to ensure security measures are properly tested and validated
• Work with the Infrastructure SME and Systems Engineer to implement secure deployment processes and infrastructure-as-code practices

Requirements

• Proven experience in a DevSecOps leadership role, preferably in large-scale enterprise projects
• Strong knowledge of security principles, compliance requirements, and best practices in software development
• Expertise in implementing and managing security tools and processes within CI/CD pipelines
• Experience with cloud security, containerization, and microservices architectures
• Proficiency in scripting languages (e.g., Python, Bash) and infrastructure-as-code tools (e.g., Terraform, Ansible)
• Familiarity with Agile methodologies and Scrum frameworks
• Experience with logging and monitoring tools, particularly Splunk
• Knowledge of API security and gateway management
• Understanding of AI and machine learning security considerations
• Experience with Java and RESTful services development is a plus
• Familiarity with low-code/no-code platforms and their security implications is beneficial

Benefits

• Comprehensive benefits package including health insurance
• Incentive and recognition program
• 401K contribution