System Database Developer - SecDevOps

Gunnison Consulting Group; Bethesda (MD); Hybrid; USD 130,000 - 145,000; Full time

Benefits offered by this job

3 weeks Personal Leave

11 paid Holidays

Flexible Time Off

401(k) 50% match

Medical, Dental and Vision Insurance

Life and Disability Insurance

Public Transportation Subsidies

Certifications and Training Allowance

Job summary

Gunnison Consulting Group seeks a seasoned engineer to design, develop, and secure enterprise applications, databases, and infrastructure for NIH CIT systems in a hybrid Bethesda, MD setting. You will integrate SecDevOps practices across the software lifecycle and build robust CI/CD pipelines using Azure DevOps, Jenkins, GitLab, GitHub Actions, or AWS CodePipeline.

You will develop database solutions (SQL Server, Oracle, PostgreSQL, MySQL) and create database objects, while enforcing secure

Qualifications

• Experience in enterprise database platforms (SQL Server, Oracle, PostgreSQL, MySQL).
• Write SQL, stored procedures, scripts, and data-integration logic.
• Software development with Python, PowerShell, Java, C#, JavaScript/TypeScript, Bash.
• Building or supporting CI/CD pipelines and source-control workflows.
• Secure-coding practices, code review, vulnerability remediation.
• Cloud, hybrid-cloud, containers, and IaC environments.
• Database security including RBAC, encryption, audit logging, and backup/recovery.
• Implementing NIST RMF/SP 800-53 controls and secure config baselines.
• Agile/DevSecOps teams; communicate risks and remediation to stakeholders.
• Bachelor’s degree in cybersecurity-related field.
• Security+ or equivalent certification; one cloud/DevOps/secure software cert.

Responsibilities

• Design, develop, maintain, and secure enterprise apps, databases, automation, and infrastructure for NIH CIT systems.
• Implement SecDevOps across the software lifecycle.
• Develop and maintain CI/CD pipelines with major tools.
• Build and maintain database solutions using enterprise platforms.
• Develop database objects, schemas, and data-integration procedures.
• Apply secure coding standards; remediate security findings.
• Support secure design including authentication, encryption, auditing, and backups.
• Identify and remediate vulnerabilities with cybersecurity and engineering teams.
• Implement IaC and configuration-management with tools like Terraform/Ansible/CloudFormation.
• Support containerized and cloud-native environments (Docker/Kubernetes/OpenShift).
• Implement security monitoring, SIEM integration, and vulnerability management.
• Ensure compliance with NIH/HHS/federal cybersecurity requirements.
• Collaborate with cross-functional teams to resolve issues and deliver secure solutions.
• Develop technical documentation and SOPs.
• Participate in code reviews, architecture reviews, and release planning.
• Produce status reports and remediation updates.

Skills

Systems dev

Database dev

DevOps / Cloud

Security engineering

Agile / DevSecOps

Programming languages

Education

Bachelor's degree

Master’s degree (desired)

Tools

Azure DevOps

Jenkins

GitLab CI/CD

GitHub Actions

AWS CodePipeline

Terraform

Ansible

CloudFormation

Docker

Kubernetes

OpenShift

Job description

Description

* This position is contingent upon a future opening with Gunnison.

Salary: $130,000 - $145,000/year

Work location: Hybrid, 2-3 days per week on-site in Bethesda, MD.

• Design, develop, maintain, and secure enterprise applications, databases, automation workflows, and supporting infrastructure for NIH CIT systems and services.
• Implement Secure DevOps (SecDevOps) practices throughout the software-development lifecycle, integrating security requirements into planning, design, development, testing, deployment, operations, and maintenance.
• Develop and maintain CI/CD pipelines using tools such as Azure DevOps, Jenkins, GitLab CI/CD, GitHub Actions, AWS CodePipeline, or comparable platforms.
• Build, maintain, and enhance database solutions using technologies such as Microsoft SQL Server, Oracle, PostgreSQL, MySQL, MongoDB, or other enterprise database platforms.
• Develop database objects and code, including schemas, tables, views, stored procedures, functions, triggers, queries, scripts, and data-integration processes.
• Apply secure-coding standards and remediate findings from static application security testing (SAST), dynamic application security testing (DAST), software-composition analysis (SCA), container scanning, infrastructure-as-code scanning, and manual code review.
• Support secure application and database design, including authentication, authorization, privileged access, encryption, secrets management, secure APIs, data masking, logging, auditing, backup, recovery, and high availability.
• Identify, analyze, prioritize, and remediate application, database, cloud, container, operating-system, and infrastructure vulnerabilities in coordination with cybersecurity, system owners, and engineering teams.
• Implement and maintain infrastructure-as-code and configuration-management solutions using tools such as Terraform, Ansible, CloudFormation, ARM/Bicep, Chef, Puppet, or comparable technologies.
• Support containerized and cloud-native application environments using Docker, Kubernetes, OpenShift, AWS, Azure, Google Cloud Platform, or comparable technologies.
• Implement security monitoring, audit logging, and alerting for applications, databases, cloud services, and CI/CD pipelines; support integration with SIEM and vulnerability-management platforms.
• Ensure application, database, and DevOps activities comply with NIH, HHS, and federal cybersecurity requirements, including NIST RMF, NIST SP 800-53, secure development principles, configuration management, continuous monitoring, and vulnerability-management processes.
• Collaborate with developers, database administrators, cloud engineers, cybersecurity engineers, system owners, ISSOs, and program leadership to resolve technical issues and deliver secure solutions.
• Develop and maintain technical documentation, including system designs, data models, database design documents, deployment procedures, runbooks, configuration baselines, security documentation, and SOPs.
• Participate in code reviews, architecture reviews, release planning, sprint activities, change-control processes, incident-response support, disaster-recovery testing, and continuous-improvement initiatives.
• Produce technical status reports, vulnerability-remediation updates, operational metrics, and management briefings as required.

Requirements

Minimum of three (3) to five (5) years of progressively responsible experience in systems development, database development or administration, DevOps, cloud engineering, software engineering, security engineering, or a closely related technical discipline.

Candidates should demonstrate experience in:

• Developing, administering, optimizing, or securing enterprise database platforms, preferably SQL Server, Oracle, PostgreSQL, MySQL, or equivalent.
• Writing SQL, stored procedures, functions, scripts, data-integration logic, and performance-tuning queries.
• Software development using one or more languages such as Python, PowerShell, Java, C#, JavaScript/TypeScript, Bash, or similar languages.
• Building or supporting CI/CD pipelines and source-code management using Git and one or more DevOps platforms.
• Secure-coding practices, code review, application-security testing, vulnerability remediation, and software dependency management.
• Cloud, hybrid-cloud, container, virtualization, or infrastructure-as-code environments.
• Database security, including role-based access control, privileged-access management, encryption, audit logging, backup/recovery, and vulnerability remediation.
• Implementing or supporting NIST RMF, NIST SP 800-53 controls, secure configuration baselines, patch management, continuous monitoring, or federal cybersecurity compliance activities.
• Working in Agile/DevSecOps delivery teams and communicating technical risks, work status, and remediation recommendations to stakeholders.
• Bachelor’s degree from an accredited college or university in cybersecurity, computer science, information systems, software engineering, computer engineering, database administration, data management, cloud computing, network engineering, or a closely related technical discipline.
• Security+ or equivalent baseline cybersecurity certification
• One relevant technical certification in cloud, database, DevOps, or secure software development

Clearance Requirement: Ability to obtain and maintain a Public Trust.

Desired Qualifications

• Master’s degree in cybersecurity, computer science, software engineering, information systems, data science, database technologies, cloud computing, systems engineering, or a related technical discipline.
• Other relevant cybersecurity, cloud, database, DevSecOps, or secure software-development certifications.

The salary range for this position depends upon multiple factors including location, the individual's knowledge, skills, competencies, and experience, and contract-specific budget constraints and organizational requirements.
Gunnison Consulting Group's total compensation package also includes bonus and profit‑sharing opportunities, depending on company and employee performance. Available employee benefits include:

• 3 weeks of Personal Leave your first year
• 11 paid Holidays each year
• 5 days of Flexible Time Off each year for approved training or certifications (self-study is ineligible)
• 401(k) company match at 50% up to 10% of your salary
• Medical, Dental and Vision Insurance
• Life and Disability Insurance
• Public Transportation Subsidies
• Certifications and Training Allowance - Up to $5,000/year!

Why Join Gunnison

• Gunnison takes on ambitious projects. We target fun, challenging work that requires creative thinking and innovation.
• Quality is our top priority.
• Gunnison employee benefits meet or exceed what other companies in the Washington, D.C. metropolitan area offer.
• There is a great sense of camaraderie at Gunnison. This is an atmosphere we will maintain as we continue to grow.
• We are growing rapidly and the opportunity for individual professional growth with Gunnison is outstanding.
• We hire for careers at Gunnison, not to fill a position.

Equal Opportunity/Affirmative Action Employer. Must be eligible for employment in the United States. We are unable to sponsor candidates at this time.
In 1994 Gunnison began serving the greater Washington, D.C. metro area, focused on tackling our customers' most ambitious technology projects. By creating a culture dedicated to enabling our customers and employees to achieve more than they ever thought they could , the company has thrived for over 25 years.