Senior DevSecOps Engineer - Remote, PCI & Cloud Security

General Dynamics Information Technology, Inc.; Virginia Beach (VA); Remote; USD 115,000 - 155,000; Full time

Job summary

General Dynamics Information Technology, Inc. seeks a Senior DevSecOps Engineer to support the AOUSC PACER development team. You will develop, operate, and secure public access systems for court records, ensuring secure CICD pipelines and scalable services.

You will collaborate across lifecycle phases, leverage Secure DevOps practices, and contribute to PCI/FISMA compliance while working in a dynamic, security-conscious environment.

Qualifications

• 5+ years of IT system engineering, systems development, systems coding and programming.
• Bachelor's degree in computer science, Software Engineering, or related field.
• Comprehensive knowledge of security compliance and security control.
• Proficient skills in C, Java, JSF, Tomcat, PrimeFaces, JavaScript, CSS, and/or Linux shell.
• Strong experience implementing and supporting end-to-end automated DevSecOps pipelines and processes.
• Strong experience in RedHat Linux.
• Strong experience in Cloud APIs and Cloud technologies with some programming experience.
• Strong experience with providing engineering support for software application in the full DevOps pipeline.
• Demonstrated ability to adapt to different enterprise security requirements.
• Experience with DevOps tools (Jira, Confluence, GitLab CI/CD, GitHub Actions, Jenkins, Bash, Subversion, JetBrains Tool Suite)
• Experience as platform team developer who develops and manages the CI/CD pipelines of a wide variety of applications.
• Experienced in providing DevSecOps implementation using Jenkins, Gitlab, or similar tools.
• Experienced in developing, testing, and maintaining containerized applications.
• Working knowledge of source version control, build/release tools and methodologies, and CI/CD pipelines.
• Working knowledge of Software Build process.
• Strong "security first" mindset.
• Strong experience in and understanding of Cloud APIs and Cloud technologies with some programing experience.
• In-depth knowledge of agile methodologies.
• Preferred: Perl

Responsibilities

• Develop, maintain, and support PacER-related products and internal systems.
• Monitor PCI and security standards compliance through secure development practices.
• Conduct requirements gathering, design, analyze, develop, test, deploy, support, and maintain systems across the software lifecycle.
• Develop and maintain enterprise-class software using C, Java, JSF, PrimeFaces, JavaScript, CSS, and Linux shell.
• Develop secure web services using SOAP, REST, WSDL, XSD, XML, and JSON.
• Design and document use cases, test cases, and validation results.
• Participate in an Agile environment with planning, retros, demos, and stand-ups.
• Review documentation and modifications, provide impact analysis.
• Define, document, and maintain architectures aligned with enterprise standards.
• Implement secure engineering practices, vulnerability remediation, and compliance activities such as ATO, PCI, and FISMA.
• Conduct performance analysis, capacity planning, and system tuning; plan COOP/DR capabilities.
• Manage configurations, version control, and source repositories; participate in change control.
• Provide knowledge transfer and training for Technical Points of Contact.
• Evaluate emerging technologies to improve efficiency and reduce debt.

Skills

Apache Tomcat

DevOps

JavaScript

Linux

Security Standards

PCI Compliance

Education

Bachelor's degree in computer science, Software Engineering, or related field

Tools

Jira

Confluence

GitLab CI/CD

GitHub Actions

Jenkins

Bash

Subversion

JetBrains Tool Suite

Job description

General Dynamics Information Technology, Inc. seeks a Senior DevSecOps Engineer to support the AOUSC PACER development team. You will develop, operate, and secure public access systems for court records, ensuring secure CICD pipelines and scalable services.

You will collaborate across lifecycle phases, leverage Secure DevOps practices, and contribute to PCI/FISMA compliance while working in a dynamic, security-conscious environment.