DevSecOps Engineer

Description & Requirements

Maximus is seeking a DevSecOps Engineer to support a defense client remotely.

This position is contingent upon award.

This position requires an active Top Secret security clearance with SCI eligibility and is remote.

Travel to Washington DC, Northern VA, Boston, MA and San Antonio, TX will be required.

Maximus TCS (Technology and Consulting Services) Internal Job Profile Code: TCS089, T5, Band 8

Job-Specific Essential Duties and Responsibilities:


* Provides Development, Security, and Operations (DevSecOps) areas of incident response, vulnerability scanning and management, problem management, certificate management, penetration testing, password policy management, data analysis of network security, remediation patching coordination, and compliance efforts.


* Implements automated application security testing tools, making users aware of how to best use application security features.


* Collaborates to develop an automated security framework for strong deployment tools and processes, leveraging various scripting languages and open-source solutions.


* Recommends automation improvements to replace manual tasks for network infrastructure provisions and security operational processes.


* Gathers requirements, designs and implements solutions, and fixes network or security operational issues.


* Manages end-user and administration access for access control.


* Performs network or security analysis and troubleshooting; diagnoses root cause analysis, using monitoring tools and system analytics; and applies system patches to DevOps tooling.


* Updates security procedures and maintains operations runbooks to report procedures and operations to avoid recurring issues.


* Sets up, conducts risk assessment, monitors, and maintains proxy servers, systems, and firewalls.


* Performs penetration testing and security code reviews.


* Coordinates change requests and provide status updates.


* Researched technology trends and best practices for cloud site reliability engineering.

Job-Specific Minimum Requirements:


* Candidates must have an active Top Secret with SCI eligibility required.


* BS in Computer Science, information Technology, or related field.

10 years of experience or multiple IT certifications may be substituted for a degree.


* 8 years of work-related experience required.


* Security+ or DoD 8570 IAT-II certification required.


* Ability to travel 10% - 20%.

Preferred Skills and Qualifications:


* Certified Kubernetes Application Developer (CKAD), Red Hat Certified Engineer (RHCE), Certified Jenkins Engineer (CJE), AWS Certified DevOps Engineer, Certified Kubernetes Engineer (CKA), GitLab Certified DevOps Professional, or similar certifications.


* Familiar with technical aspects for IT and IAT-Level II Certifications.


* Experience with CI/CD pipelines, infrastructure as code, and containerization technologies


* Expertise in clo...