Senior DevSecOps Engineers

General Dynamics IT; United States; On-site; USD 140,000 - 170,000; Full time

Job summary

General Dynamics IT seeks a Senior DevSecOps Engineer to support AOUSC PACER systems. The role focuses on secure development, authentication, and billing workflows, with emphasis on PCI and enterprise security controls.

You will contribute across the SDLC, building scalable, containerized apps in Linux environments and integrating secure web services. Eligible candidates have 5+ years in DevSecOps and a security-first mindset.

Qualifications

• 5+ years of IT system engineering, systems development, or related experience.
• Bachelor's degree in computer science or related field.
• Proficient knowledge of security compliance and security control.
• Proficient in C, Java, JSF, Tomcat, PrimeFaces, JavaScript, CSS, and Linux shell.
• Strong experience implementing end-to-end automated DevSecOps pipelines and processes.
• Strong experience in RedHat Linux.
• Cloud APIs and Cloud technologies with some programming experience.
• Experience with DevSecOps pipelines and CI/CD tools (Jira, Confluence, GitLab CI/CD, GitHub Actions, Jenkins).
• Experience developing, testing, and maintaining containerized applications.
• Security-first mindset and agile familiarity.
• Perl is a plus.

Responsibilities

• Develop, maintain, and support PACER account registration and management, authentication, billing, and Case Locator systems.
• Monitor PCI and other security standards through secure development practices.
• Conduct SDLC activities: gather requirements, design, develop, test, deploy, and maintain systems.
• Develop enterprise software using C, Java, JSF, PrimeFaces, JavaScript, CSS, and Linux shell.
• Build secure web services using SOAP, REST, WSDL, XSD, XML, and JSON.
• Design and document use cases, test cases, and validation results.
• Participate in Agile ceremonies including planning, retros, demos, and stand-ups.
• Review requirements and design artifacts; prepare documentation packages.
• Evaluate changes and impact; maintain system and software architectures.

Skills

Tomcat

JavaScript

Linux

Security standards

SDLC

Education

Bachelor's degree in computer science or related field

Tools

Jira

Confluence

GitLab CI/CD

GitHub Actions

Jenkins

Bash

Subversion

JetBrains Tool Suite

Job description

Type of Requisition: Regular

Clearance Level Must Currently Possess: None

Clearance Level Must Be Able to Obtain: None

Public Trust/Other Required: Other

Job Family: Cyber and IT Risk Management

Job Qualifications:

Skills: Apache Tomcat, JavaScript, Linux, Security Standards, Software Development Life Cycle (SDLC)

Certifications: None

Experience: 5 + years of related experience

US Citizenship Required: No

Job Description:

SR DEVSECOPS ENGINEER

Seize your opportunity to make a personal impact supporting the Administrative Office of the United States Courts (AOUSC). The AOUSC is responsible for providing oversight, supervision, and coordination of the court and judicial case management systems. These systems include the Judiciary's Case Management/Electronic Case Files (CM/ECF) and Public Access to Court Electronic Records (PACER) systems.

The Senior DevSecOps Engineer will work as part of the PACER Development team responsible for developing, operating, and supporting internal and external systems that allow for secure public access to court electronic records for the Judiciary.

RESPONSIBILITIES

• Develop, maintain, and support products such as PACER account registration and management, PACER authentication, PACER billing and the PACER Case Locator as well as internal systems such as PACER Account Maintenance System, PSC Help Desk Support application, and Court PACER access reports
• Monitor continued compliance with Payment Card Industry (PCI) and other security standards through secure development practices
• Conduct requirements gathering, design, analyze, develop, test, deploy, support, and maintain systems across the software development lifecycle
• Develop and maintain enterprise-class software systems using C, Java, JSF, PrimeFaces, JavaScript, CSS, and/or Linux shell
• Develop secure web services utilizing standards such as SOAP, REST, WSDL, XSD, XML, and/or JSON
• Independently and collaboratively design and create efficient, scalable and resilient software solution
• Create and document use cases, test cases, and system validation results
• Participate in an Agile work environment including planning, retrospectives, demos, and stand-ups
• Review and validate functional requirements, system description, and design artifacts and prepare complete documentation packages
• Review project related documentation and modification requests and provide impact/feasibility analysis
• Define, document, and maintain system and software architectures, ensuring alignment with enterprise standards and supporting integration across internal and external system
• Implement secure engineering practices, vulnerability remediation, and compliance activities such as ATO, PCI, and FISMA
• Conduct performance analysis, capacity planning, and system tuning; design and test continuity of operations (COOP) and disaster recovery (DR) capabilities
• Manage Software configurations, version control, and source code repositories; participate in change control process
• Provide knowledge transfer, training, and documentation for Technical Points of Contact
• Evaluate and recommend emerging technologies, frameworks, and tools to improve efficiency, reduce technical debt, and sustain system viability

REQUIRED EXPERIENCE & QUALIFICATIONS

• 5+ years of experience in IT system engineering, systems development, systems coding and programming
• Bachelor's degree in computer science, Software Engineering, or related field
• Comprehensive knowledge of security compliance and security control
• Proficient skills in C, Java, JSF, Tomcat, PrimeFaces, JavaScript, CSS, and/or Linux shell
• Strong experience implementing and supporting end-to-end automated DevSecOps pipelines and processes
• Strong experience in RedHat Linux
• Strong experience in and understanding of Cloud APIs and Cloud technologies with some programing experience
• Strong experience with providing engineering support for software application in the full DevOps pipeline
• Demonstrated ability to adapt to different enterprise security requirements.
• Experience with DevOps tools (Jira, Confluence, GitLab CI/CD, GitHub Actions, Jenkins, Bash, Subversion, JetBrains Tool Suite)
• Experience as platform team developer who develops and manages the CI/CD pipelines of a wide variety of applications
• Experienced in providing DevSecOps implementation using Jenkins, Gitlab, or similar tools
• Experienced in developing, testing, and maintaining containerized applications
• Working knowledge of source version control, build/release tools and methodologies, and CI/CD pipelines
• Working knowledge of Software Build process.
• Strong "security first" mindset
• Strong experience in and understanding of Cloud APIs and Cloud technologies with some programing experience
• In-depth knowledge of agile methodologies
• Preferred: Perl

COMMUNICATION

Excellent presentation and communication skills. Consultant mindset, able work with high level customer stakeholders and build excellent customer relationships. Strong analytical and problem-solving skills, able to