Description & Requirements

Maximus is seeking a DevSecOps Engineer to provide expertise to a federal client in support of mission-critical systems in defense of our Homeland. As a key member of the team, the DevSecOps Engineer will integrate security practices throughout the software development lifecycle while advancing the reliability, automation, and security of mission-critical systems.

This role is on-site in Colorado Springs, CO and requires an active Secret clearance.

Maximus TCS (Technology and Consulting Services) Internal Job Profile Code: TCS088, T4, Band 7

Job-Specific Essential Duties and Responsibilities:

- Innovate and develop cutting-edge solutions through automation, including Infrastructure as Code, DevSecOps tools, CI/CD, code quality, security, and monitoring.

- Review, update, and create Chef cookbooks daily to support automated configuration management, infrastructure consistency, and secure system deployments.

- Develop, maintain, and execute Ansible playbooks to automate configuration management, system provisioning, application deployment, and operational tasks.

- Use Ansible Satellite to support automated patching, configuration enforcement, system lifecycle management, and infrastructure compliance activities.

- Support virtualization and infrastructure operations using VMware vSphere and vCenter, including virtual machine, template, snapshot, resource allocation, and environment automation activities.

- Support and maintain Chef-based automation, including Chef Automate and Chef Ruby, to ensure repeatable, reliable, and compliant infrastructure configurations.

- Apply knowledge of HashiCorp Vault to support secure secrets management, credential storage, access control, and integration with automated deployment workflows.

- Ensure infrastructure, services, and applications meet security, monitoring, performance, and service-level standards.

- Release production code and develop Platform as a Service and Software as a Service solutions.

- Collaborate with development, operations, and cross-functional teams to design, implement, and maintain secure, automated infrastructure that complies with applicable security standards and regulatory requirements.

- Implement security best practices throughout the software development lifecycle, including code scanning, vulnerability assessment, threat modeling, static and dynamic analysis, and security testing.

- Develop and maintain CI/CD pipelines that enable continuous integration, continuous delivery, and continuous deployment.

- Develop and maintain containerized applications and microservices.

- Automate and orchestrate security processes, including incident response and threat detection, using technologies such as Splunk, Chef Automate, and Ansible.

- Participate in a one-week-per-month on-call rotation to support emergency page-outs, incident response, and mission-critical operational needs.

- Stay current with emerging DevSecOps trends, tools, and practices and recommend appropriate new technologies.

- Provide mentorship and guidance to junior engineers on DevSecOps practices and techniques.

Job-Specific Minimum Requirements:

- Active Secret clearance.

- Due to federal, agency, and contract requirements, candidates must be U.S. citizens.

- 12+ years of experience as a DevSecOps Engineer or in a related field.

- Daily hands-on experience reviewing, updating, and creating Chef cookbooks.

- Experience with Chef, Chef Automate, and Chef Ruby for configuration management and infrastructure automation.

- Experience developing, maintaining, and executing Ansible playbooks for automation, configuration management, and deployment activities.

- Experience with Ansible Satellite for system management, patching, configuration enforcement, and compliance support.

- Experience with VMware vSphere and vCenter for virtual infrastructure management, provisioning, and automation.

- Knowledge of HashiCorp Vault for secrets management, credential lifecycle management, and secure application and infrastructure integration.

- Experience with one or more of the following: Docker Enterprise, Splunk, Chef, Chef Automate, Chef Ruby, Puppet, Ansible, Ansible Satellite, Kubernetes, OpenShift, VMware vSphere, or VMware vCenter.

- Hands-on experience with Terraform, Jenkins Groovy scripts, and Python.

- Candidates must reside within a commutable distance for daily onsite work and on-call requirements.

- This contract supports systems that require 24x7x365 uptime. Candidates must be willing and able to meet recall requirements, including participation in a rotational on-call schedule.

#techjobs #clearance #veteransPage #APPCASTDTO

Minimum Requirements

TCS088, T4, Band 7

Minimum Salary

$

120,000.00

Maximum Salary

$

140,000.00