DevSecOps Engineer, U.S. Supreme Court, Washington, D.C.

Technologist, Inc.; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Short & Long Term Disability

401K with match

PTO

Sick Leave

Job summary

Technologist Inc. is seeking experienced DevSecOps Engineers to join our team at the U.S. Supreme Court in Washington D.C. The selected individuals will provide security engineering support to enhance software development, testing, and operations.

Design and implement secure CI/CD pipelines for C#/.NET apps, integrate automated security testing, and support secure coding practices within Agile sprints. Remote work is not mentioned; on-site support at the Court is expected.

Qualifications

• Bachelor's degree or equivalent in IT.
• At least 5 years experience as a DevOps/DevSecOps engineer.
• Experience embedding security into the SDLC and CI/CD.
• Ability to pass background investigation at Public Trust level.

Responsibilities

• Design secure CI/CD pipelines for C#/.NET apps.
• Integrate SAST/DAST/IAST into pipelines to detect vulnerabilities.
• Participate in Agile sprint planning and reviews.
• Conduct security-focused code reviews per OWASP Top 10.
• Configure Azure DevOps, GitLab CI/CD or GitHub Actions to automate pipelines.
• Support hybrid on-prem + cloud environments.
• Use Docker and Kubernetes for secure deployments.
• Provide remediation guidance for vulnerabilities.
• Maintain DevSecOps docs and security reports.
• Coordinate with Information Assurance for compliance.

Skills

DevSecOps

CI/CD security

Security reviews

OWASP Top 10

NIST RMF

Agile development

Security automation

Education

Bachelor's degree or equivalent in IT

Tools

Azure DevOps

GitHub Actions

GitLab CI/CD

Docker

Kubernetes

Visual Studio

SQL Server

C#

.NET

Job description

Technologist Inc. is seeking experienced DevSecOps Engineers to join our team at the U.S. Supreme Court in Washington D.C. The selected individuals will be expected to provide security engineering support, with a focus in DevOps Security operations/activities, to enhance existing software development, testing, and operational support activities.

This includes integrating automated security testing into current CI/CD workflows, supporting secure coding practices, assisting with security-focused code reviews, and ensuring that applications developed or maintained by the Court meet required security standards.

DevSecOps Security Engineers shall work within the Court’s Agile development and NIST RMF frameworks and support the Court’s existing Microsoft-centric development environment; including C#, .NET, Visual Studio, SQL Server, and or one of the following tools Azure DevOps, GitHub or GitLab.

The DevSecOps Security Engineer must be adaptable to work with various DevOps tools and platforms, both on-premise and cloud-based, and support containerization and orchestration technologies including Docker and Kubernetes.

• Design, implement, and maintain secure CI/CD pipelines for C#/.NET applications


• Integrate automated security testing tools, such as Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Interactive Application Security Testing (IAST), into CI/CD pipelines to streamline security testing and detect vulnerabilities at different stages of development.


• Participate in Agile sprint planning and reviews.


• Conduct security-focused code reviews aligned with OWASP Top 10.


• Configure and manage one of the following DevOps tools: Azure DevOps, GitLab CI/CD, or GitHub Actions, to streamline development workflows and automate CI/CD pipelines.


• Support hybrid DevOps environments (on-prem + cloud).


• Utilize Docker and Kubernetes for secure deployments.


• Provide remediation guidance for vulnerabilities.


• Maintain DevSecOps documentation & provide security reports.


• Liaise with Information Assurance Group for compliance.


• Perform security focused code review with developers.


• Define security focused test cases and assist QA performing these tests during sprint tests.

• Bachelor's degree OR equivalent related experience in IT.


• At least 5 (five) years of experience working as a DevOps Engineer.


• Demonstrated experience with embedding security into the SDLC.


• Ability to pass background investigation at the level of Public Trust.

Technologist Inc. offers a robust benefits package effective your first day of employment.

• Medical


• Dental


• Vision


• Short & Long Term Disability


• 401K with match


• PTO


• Sick Leave