DevSecOps Engineer - customsoftwaresystems

OpenTalent; Washington; On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Health insurance plans

Health Savings Account (HSA)

Dental

Vision

Long-term disability

Short-term disability

Basic term life insurance

Supplemental term life insurance for员工

Job summary

Custom Software Systems, Inc. seeks an experienced DevSecOps engineer to design and secure CI/CD pipelines for federal-scale environments, integrating SIEMs, scanners, and ticketing into automated workflows.

The role emphasizes IaC, configuration management, and data normalization across diverse tools, with a requirement for US citizenship and VA Tier 4 / High Risk clearance eligibility.

Qualifications

• Minimum of ten (10) years of DevSecOps experience.
• At least five (5) of those ten (10) years in cybersecurity and cloud security at a large government agency comparable in size and scope to VA, DoD, IRS, or GSA.
• Secure CI/CD pipeline engineering with in-pipeline security gates; integrating SIEM/scanners/ticketing into automated workflows; infrastructure-as-code and configuration management at scale; and data-normalization/schema work across disagreeing tools.
• S.-based; able to obtain and maintain the VA Tier 4 / High Risk Public Trust and PIV.

Responsibilities

• Engineer secure CI/CD pipelines with security gates enforced in the pipeline, and integrate disparate security tooling (SIEM, scanners, ticketing) into automated, orchestrated workflows.
• Build and maintain the automation backbone: a version-controlled workflow/SOAR library, engineering runbooks and playbooks, and data-normalization and labeling standards across tools that don't natively agree.
• Harden and manage enterprise baseline configurations using infrastructure-as-code and configuration management at scale, with change control that survives an audit.
• Produce the recurring engineering deliverables this role owns — integration and schema documentation, monthly tool-optimization reporting, and audit-remediation and requirements-traceability artifacts.
• Support continuous security validation, vulnerability management, and incident response across cloud-native and hybrid environments.

Skills

DevSecOps experience

Cybersecurity

Cloud security

Secure CI/CD pipelines

Agency experience

Education

IAT III / IAM III / IASAE III (CISSP preferred)

Tools

SIEM

Security scanners

Ticketing systems

Terraform

Ansible

Kubernetes security

Job description

Responsibilities

• Engineer secure CI/CD pipelines with security gates enforced in the pipeline, and integrate disparate security tooling (SIEM, scanners, ticketing) into automated, orchestrated workflows.
• Build and maintain the automation backbone: a version-controlled workflow/SOAR library, engineering runbooks and playbooks, and data-normalization and labeling standards across tools that don't natively agree.
• Harden and manage enterprise baseline configurations using infrastructure-as-code and configuration management at scale, with change control that survives an audit.
• Produce the recurring engineering deliverables this role owns — integration and schema documentation, monthly tool-optimization reporting, and audit-remediation and requirements-traceability artifacts.
• Support continuous security validation, vulnerability management, and incident response across cloud-native and hybrid environments.

Citizenship

US Citizenship

Required Qualifications

• Minimum of ten (10) years of DevSecOps experience
• At least five (5) of those ten (10) years in cybersecurity and cloud security at a large government agency comparable in size and scope to VA, DoD, IRS, or GSA.
• Secure CI/CD pipeline engineering with in-pipeline security gates; integrating SIEM/scanners/ticketing into automated workflows; infrastructure-as-code and configuration management at scale; and data-normalization/schema work across disagreeing tools.
• S.-based; able to obtain and maintain the VA Tier 4 / High Risk Public Trust and PIV.

Certifications

• One current certification: IAT III, IAM III, or IASAE III ( CISSP preferred)

Preferred Qualifications

• Federal DevSecOps experience.
• Container and Kubernetes security.
• Experience retiring redundant tooling,

Compensation & Benefits [1] [2]

• Wage Range: Negotiable
• General Benefits: Custom Software Systems, Inc. offers our employees a competitive benefits package that may include:
• Health insurance plans
• Health Savings Account (HSA)
• Dental
• Vision
• Long-term disability
• Short-term disability
• Basic term life insurance
• Supplemental term life insurance for employees, spouses, and dependents
• Simple IRA
• Parking/Commuting expense reimbursement
• Training/Education