Senior DevSecOps Engineer

General Dynamics Information Technology; Virginia Beach (VA); Remote; USD 115,000 - 155,000; Full time

Job summary

General Dynamics Information Technology, Inc. seeks a Senior DevSecOps Engineer to support the AOUSC PACER development team. You will develop, operate, and secure public access systems for court records, ensuring secure CICD pipelines and scalable services.

You will collaborate across lifecycle phases, leverage Secure DevOps practices, and contribute to PCI/FISMA compliance while working in a dynamic, security-conscious environment.

Qualifications

• 5+ years of IT system engineering, systems development, systems coding and programming.
• Bachelor's degree in computer science, Software Engineering, or related field.
• Comprehensive knowledge of security compliance and security control.
• Proficient skills in C, Java, JSF, Tomcat, PrimeFaces, JavaScript, CSS, and/or Linux shell.
• Strong experience implementing and supporting end-to-end automated DevSecOps pipelines and processes.
• Strong experience in RedHat Linux.
• Strong experience in Cloud APIs and Cloud technologies with some programming experience.
• Strong experience with providing engineering support for software application in the full DevOps pipeline.
• Demonstrated ability to adapt to different enterprise security requirements.
• Experience with DevOps tools (Jira, Confluence, GitLab CI/CD, GitHub Actions, Jenkins, Bash, Subversion, JetBrains Tool Suite)
• Experience as platform team developer who develops and manages the CI/CD pipelines of a wide variety of applications.
• Experienced in providing DevSecOps implementation using Jenkins, Gitlab, or similar tools.
• Experienced in developing, testing, and maintaining containerized applications.
• Working knowledge of source version control, build/release tools and methodologies, and CI/CD pipelines.
• Working knowledge of Software Build process.
• Strong "security first" mindset.
• Strong experience in and understanding of Cloud APIs and Cloud technologies with some programing experience.
• In-depth knowledge of agile methodologies.
• Preferred: Perl

Responsibilities

• Develop, maintain, and support PacER-related products and internal systems.
• Monitor PCI and security standards compliance through secure development practices.
• Conduct requirements gathering, design, analyze, develop, test, deploy, support, and maintain systems across the software lifecycle.
• Develop and maintain enterprise-class software using C, Java, JSF, PrimeFaces, JavaScript, CSS, and Linux shell.
• Develop secure web services using SOAP, REST, WSDL, XSD, XML, and JSON.
• Design and document use cases, test cases, and validation results.
• Participate in an Agile environment with planning, retros, demos, and stand-ups.
• Review documentation and modifications, provide impact analysis.
• Define, document, and maintain architectures aligned with enterprise standards.
• Implement secure engineering practices, vulnerability remediation, and compliance activities such as ATO, PCI, and FISMA.
• Conduct performance analysis, capacity planning, and system tuning; plan COOP/DR capabilities.
• Manage configurations, version control, and source repositories; participate in change control.
• Provide knowledge transfer and training for Technical Points of Contact.
• Evaluate emerging technologies to improve efficiency and reduce debt.

Skills

Apache Tomcat

DevOps

JavaScript

Linux

Security Standards

PCI Compliance

Education

Bachelor's degree in computer science, Software Engineering, or related field

Tools

Jira

Confluence

GitLab CI/CD

GitHub Actions

Jenkins

Bash

Subversion

JetBrains Tool Suite

Job description

Type of Requisition: RegularClearance Level Must Currently Possess: NoneClearance Level Must Be Able to Obtain: NonePublic Trust/Other Required: OtherJob Family: Cyber and IT Risk ManagementJob Qualifications:Skills: Apache Tomcat, DevOps, JavaScript, Linux, Security StandardsCertifications: NoneExperience: 5 + years of related experienceUS Citizenship Required: NoJob Description:SR DEVSECOPS ENGINEERSeize your opportunity to make a personal impact supporting the Administrative Office of the United States Courts (AOUSC). The AOUSC is responsible for providing oversight, supervision, and coordination of the court and judicial case management systems. These systems include the Judiciary's Case Management/Electronic Case Files (CM/ECF) and Public Access to Court Electronic Records (PACER) systems.The Senior DevSecOps Engineer will work as part of the PACER Development team responsible for developing, operating, and supporting internal and external systems that allow for secure public access to court electronic records for the Judiciary.

RESPONSIBILITIES

• Develop, maintain, and support products such as PACER account registration and management, PACER authentication, PACER billing and the PACER Case Locator as well as internal systems such as PACER Account Maintenance System, PSC Help Desk Support application, and Court PACER access reports
• Monitor continued compliance with Payment Card Industry (PCI) and other security standards through secure development practices
• Conduct requirements gathering, design, analyze, develop, test, deploy, support, and maintain systems across the software development lifecycle
• Develop and maintain enterprise-class software systems using C, Java, JSF, PrimeFaces, JavaScript, CSS, and/or Linux shell
• Develop secure web services utilizing standards such as SOAP, REST, WSDL, XSD, XML, and/or JSON
• Independently and collaboratively design and create efficient, scalable and resilient software solution
• Create and document use cases, test cases, and system validation results
• Participate in an Agile work environment including planning, retrospectives, demos, and stand-ups
• Review and validate functional requirements, system description, and design artifacts and prepare complete documentation packages
• Review project related documentation and modification requests and provide impact/feasibility analysis
• Define, document, and maintain system and software architectures, ensuring alignment with enterprise standards and supporting integration across internal and external system
• Implement secure engineering practices, vulnerability remediation, and compliance activities such as ATO, PCI, and FISMA
• Conduct performance analysis, capacity planning, and system tuning; design and test continuity of operations (COOP) and disaster recovery (DR) capabilities
• Manage Software configurations, version control, and source code repositories; participate in change control process
• Provide knowledge transfer, training, and documentation for Technical Points of Contact
• Evaluate and recommend emerging technologies, frameworks, and tools to improve efficiency, reduce technical debt, and sustain system viability

REQUIRED EXPERIENCE & QUALIFICATIONS

• 5+ years of experience in IT system engineering, systems development, systems coding and programming
• Bachelor's degree in computer science, Software Engineering, or related field
• Comprehensive knowledge of security compliance and security control
• Proficient skills in C, Java, JSF, Tomcat, PrimeFaces, JavaScript, CSS, and/or Linux shell
• Strong experience implementing and supporting end-to-end automated DevSecOps pipelines and processes
• Strong experience in RedHat Linux
• Strong experience in and understanding of Cloud APIs and Cloud technologies with some programing experience
• Strong experience with providing engineering support for software application in the full DevOps pipeline
• Demonstrated ability to adapt to different enterprise security requirements.
• Experience with DevOps tools (Jira, Confluence, GitLab CI/CD, GitHub Actions, Jenkins, Bash, Subversion, JetBrains Tool Suite)
• Experience as platform team developer who develops and manages the CI/CD pipelines of a wide variety of applications
• Experienced in providing DevSecOps implementation using Jenkins, Gitlab, or similar tools
• Experienced in developing, testing, and maintaining containerized applications
• Working knowledge of source version control, build/release tools and methodologies, and CI/CD pipelines
• Working knowledge of Software Build process.
• Strong "security first" mindset
• Strong experience in and understanding of Cloud APIs and Cloud technologies with some programing experience
• In-depth knowledge of agile methodologies
• Preferred: Perl

COMMUNICATION

• Excellent presentation and communication skills.
• Consultant mindset, able work with high level customer stakeholders and build excellent customer relationships.
• Strong analytical and problem-solving skills, able to formulate and communicate recommendations for improvement
• Ability to work effectively, independently, and as part of a team.

The likely salary range for this position is $114,750 - $155,250. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Scheduled Weekly Hours: 40Travel Required: NoneTelecommuting Options: RemoteWork Location: Any Location / RemoteAdditional Work Locations:

Total Rewards at GDIT:

• Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match.
• To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave.
• GDIT typically provides new employees with 15 days of paid leave per calendar year to be used for vacations, personal business, and illness and an additional 10 paid holidays per year.
• Paid leave and paid holidays are prorated based on the employee's date of hire.
• The GDIT Paid Family Leave program provides a total of up to 160 hours of paid leave in a rolling 12 month period for eligible employees.
• To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available.
• We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.

Our Identity Verification Process:

As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.

About Our Work:

We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.

Join our Talent Community to stay up to date on our career opportunities and events atgdit.com/tc. Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans