DevSecOps Engineer II - DocuSign Security & CI/CD

Attainx Inc; Herndon (VA); Hybrid; USD 104,000 - 107,000; Full time

Job summary

AttainX, Inc. is seeking a DevSecOps Engineer II in Herndon, VA to integrate security across the DocuSign implementation and supporting infrastructure.

You will contribute to secure automation, IaC, and CI/CD practices, working both independently and with architects, developers, and security engineers. Role requires 3-5 years in DevSecOps or related fields, a BS in a computing discipline, and experience with SAST/DAST/SCA and security testing.

Qualifications

• 3-5 years of DevSecOps, software engineering, infrastructure automation, or security engineering.
• A bachelor’s degree in computer science, cybersecurity, information systems, engineering, or a related field.
• Proficiency with CI/CD tools such as Jenkins, GitLab, or Azure DevOps, including pipeline automation, IaC, and controlled deployments.
• Experience with SAST, DAST, SCA, vulnerability scanning, and penetration testing frameworks.
• Experience programming or scripting in Python, Perl, Bash, PHP, PowerShell, Java, SQL, or C++.
• Knowledge of security principles, encryption, authentication, authorization, and secret handling.
• Experience with REST APIs, connectors, webhooks, SaaS integrations; DocuSign integration preferred.
• Experience supporting lifecycle testing, Federal security requirements, and Section 508 compliance.
• Ability to work independently and collaborate with architects, developers, and security engineers.
• Must be a US Citizen able to obtain DHS CISA Public Trust clearance.

Responsibilities

• Integrate security practices throughout development, testing, deployment, and operation of DocuSign integrations and supporting infrastructure.
• Design, implement, and maintain security controls across CI/CD pipelines; automate SAST/DAST/SCA and other checks.
• Perform regular security assessments, vulnerability scanning, and authorized penetration testing within approved scope.
• Implement Infrastructure as Code, automated testing, and controlled release procedures for secure delivery.
• Configure and maintain DocuSign accounts, groups, templates, routing, policies, and security settings.
• Build and maintain plugins, connectors, and custom APIs for DocuSign integrations with Microsoft 365 and enterprise identity platforms.
• Implement encryption, secure authentication, authorization, RBAC, network protection, and secret handling; monitor threats.
• Develop and enforce security policies aligned with Federal, DHS, and CISA requirements.
• Execute tests; document defects, findings, remediation, and deployment readiness.
• Automate document conversion and records capture with NARA-compliant formats and metadata.

Skills

CI/CD tools

Jenkins

GitLab

Azure DevOps

SAST

DAST

SCA

Python

PowerShell

DocuSign

Education

Bachelor's degree

Tools

DocuSign

Microsoft 365

APIs

Job description

AttainX, Inc. is seeking a DevSecOps Engineer II in Herndon, VA to integrate security across the DocuSign implementation and supporting infrastructure.

You will contribute to secure automation, IaC, and CI/CD practices, working both independently and with architects, developers, and security engineers. Role requires 3-5 years in DevSecOps or related fields, a BS in a computing discipline, and experience with SAST/DAST/SCA and security testing.