DevSecOps Engineer

Maximus, Inc.; Colorado Springs (CO); On-site; USD 120,000 - 140,000; Full time

Job summary

Maximus, Inc. seeks a DevSecOps Engineer to strengthen security in mission-critical systems for a federal client. This on-site role in Colorado Springs requires an active Secret clearance and hands-on automation across CI/CD, IaC, and monitoring.

You will customize Chef, Ansible, and VMware tools to ensure secure deployments, patching, and compliance. Collaboration with development and operations teams is essential to maintain 24/7 readiness and robust security postures.

Qualifications

• Active Secret clearance.
• 12 years of DevSecOps experience.
• Hands-on with Chef, Ansible, and VMware.
• Experience with Ansible Satellite, Vault, and CI/CD.
• On-site daily presence in Colorado Springs.

Responsibilities

• Innovate with automation: IaC, DevSecOps tools, CI/CD, monitoring.
• Update and create Chef cookbooks for automated config management.
• Develop, maintain, and run Ansible playbooks for deployment.
• Use Ansible Satellite for patching and compliance.
• Support VMware vSphere/vCenter virtualization and automation.
• Maintain Chef Automate and Chef Ruby automation.
• Apply Vault for secrets management and secure integration.
• Ensure security, performance, and SLAs for infra/services.
• Release production code and develop PaaS/SaaS solutions.
• Collaborate across teams to maintain secure infrastructure.
• Implement secure SDLC practices and security testing.
• Develop and maintain CI/CD pipelines and containerized apps.
• Automate security processes with Splunk and Ansible.
• Participate in on-call rotation and stay current with trends.
• Mentor junior engineers in DevSecOps practices.

Skills

DevSecOps

CI/CD

Infrastructure as Code

Security Automation

Chef

Ansible

VMware vSphere

HashiCorp Vault

Splunk

Docker

Tools

Chef Automate

Chef Ruby

Ansible Satellite

Terraform

Jenkins Groovy

Python

Kubernetes

OpenShift

vCenter

Splunk

Job description

Description & Requirements

Maximus is seeking a DevSecOps Engineer to provide expertise to a federal client in support of mission-critical systems in defense of our Homeland. As a key member of the team, the DevSecOps Engineer will integrate security practices throughout the software development lifecycle while advancing the reliability, automation, and security of mission-critical systems.

This role is on-site in Colorado Springs, CO and requires an active Secret clearance.

Maximus TCS (Technology and Consulting Services) Internal Job Profile Code: TCS088, T4, Band 7

Job-Specific Essential Duties and Responsibilities:

• Innovate and develop cutting-edge solutions through automation, including Infrastructure as Code, DevSecOps tools, CI/CD, code quality, security, and monitoring.

• Review, update, and create Chef cookbooks daily to support automated configuration management, infrastructure consistency, and secure system deployments.

• Develop, maintain, and execute Ansible playbooks to automate configuration management, system provisioning, application deployment, and operational tasks.

• Use Ansible Satellite to support automated patching, configuration enforcement, system lifecycle management, and infrastructure compliance activities.

• Support virtualization and infrastructure operations using VMware vSphere and vCenter, including virtual machine, template, snapshot, resource allocation, and environment automation activities.

• Support and maintain Chef-based automation, including Chef Automate and Chef Ruby, to ensure repeatable, reliable, and compliant infrastructure configurations.

• Apply knowledge of HashiCorp Vault to support secure secrets management, credential storage, access control, and integration with automated deployment workflows.

• Ensure infrastructure, services, and applications meet security, monitoring, performance, and service-level standards.

• Release production code and develop Platform as a Service and Software as a Service solutions.

• Collaborate with development, operations, and cross-functional teams to design, implement, and maintain secure, automated infrastructure that complies with applicable security standards and regulatory requirements.

• Implement security best practices throughout the software development lifecycle, including code scanning, vulnerability assessment, threat modeling, static and dynamic analysis, and security testing.

• Develop and maintain CI/CD pipelines that enable continuous integration, continuous delivery, and continuous deployment.

• Develop and maintain containerized applications and microservices.

• Automate and orchestrate security processes, including incident response and threat detection, using technologies such as Splunk, Chef Automate, and Ansible.

• Participate in a one-week-per-month on-call rotation to support emergency page-outs, incident response, and mission-critical operational needs.

• Stay current with emerging DevSecOps trends, tools, and practices and recommend appropriate new technologies.

• Provide mentorship and guidance to junior engineers on DevSecOps practices and techniques.

Job-Specific Minimum Requirements:

• Active Secret clearance.

• 12 years of experience as a DevSecOps Engineer or in a related field.

• Daily hands-on experience reviewing, updating, and creating Chef cookbooks.

• Experience with Chef, Chef Automate, and Chef Ruby for configuration management and infrastructure automation.

• Experience developing, maintaining, and executing Ansible playbooks for automation, configuration management, and deployment activities.

• Experience with Ansible Satellite for system management, patching, configuration enforcement, and compliance support.

• Experience with VMware vSphere and vCenter for virtual infrastructure management, provisioning, and automation.

• Knowledge of HashiCorp Vault for secrets management, credential lifecycle management, and secure application and infrastructure integration.

• Experience with one or more of the following: Docker Enterprise, Splunk, Chef, Chef Automate, Chef Ruby, Puppet, Ansible, Ansible Satellite, Kubernetes, OpenShift, VMware vSphere, or VMware vCenter.

• Hands‑on experience with Terraform, Jenkins Groovy scripts, and Python.

• Candidates must reside within a commutable distance for daily onsite work and on-call requirements.

• This contract supports systems that require 24x7x365 uptime. Candidates must be willing and able to meet recall requirements, including participation in a rotational on-call schedule.

Minimum Requirements

TCS088, T4, Band 7

EEO Statement

Maximus is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, age, national origin, disability, veteran status, genetic information and other legally protected characteristics.

Pay Transparency

Maximus compensation is based on various factors including but not limited to job location, a candidate’s education, training, experience, expected quality and quantity of work, required travel (if any), external market and internal value analysis including seniority and merit systems, as well as internal pay alignment. Annual salary is just one component of Maximus’s total compensation package. Other rewards may include short- and long-term incentives as well as program-specific awards. Additionally, Maximus provides a variety of benefits to employees, including health insurance coverage, life and disability insurance, a retirement savings plan, paid holidays and paid time off. Compensation ranges may differ based on contract value but will be commensurate with job duties and relevant work experience. An applicant’s salary history will not be used in determining compensation. Maximus will comply with regulatory minimum wage rates and exempt salary thresholds in all instances.

Accommodations
Maximus provides reasonable accommodations to individuals requiring assistance during any phase of the employment process due to a disability, medical condition, or physical or mental impairment. If you require assistance at any stage of the employment process-including accessing job postings, completing assessments, or participating in interviews,-please contact People Operations at .

Minimum Salary

$ 120,000.00

Maximum Salary

$ 140,000.00