DevSecOps Engineer I

📋 Description

• Assist in the planning, coordination, and execution of secure, controlled, and auditable releases.

• Ensure that all releases satisfy quality, security, and operational acceptance criteria prior to deployment.

• Maintain and verify release artifacts, including checklists, test evidence, security results, and rollback plans.

• Write, monitor, and manage security, compliance, and operational tickets in accordance with SLAs.

• Coordinate and monitor vulnerability remediation while supporting security assessment activities.

• Keep audit-ready documentation and evidence for all tasks, ensuring traceability across tickets, changes, and releases.

• Develop and oversee SOPs, runbooks, and operational documentation in authorized repositories.

• Enforce change management and governance protocols, ensuring proper authorization for all activities.

• Assist with work intake, backlog normalization, and ticket lifecycle management using tools like Jira.

• Track metrics, risks, and issues, including maintaining risk logs and reporting status to stakeholders.

• Support SDLC governance and DevSecOps practices, including compliance with CI/CD pipelines and process enhancement.

• Aid in operations and maintenance tasks, including defect triage, patch coordination, and Tier 3 support documentation.

⛳️ Requirements

• Bachelor’s degree in information technology, Cybersecurity, or a related field.

• Experience in supporting USDA, NRCS, or other federal geospatial programs.

• 1–3 years of experience in DevOps, DevSecOps, IT operations, or release management support roles.

• Familiarity with the complete SDLC and release management lifecycle (non-development focus).

• Experience utilizing SonarQube or similar static analysis tools to review and address audit findings and enforce coding and security standards.

• Knowledge of CI/CD pipelines (e.g., Jenkins, GitLab CI, Azure DevOps) from an operational or governance viewpoint.

• Proficiency with ticketing systems (e.g., Jira) and version control systems (e.g., Git) for tracking releases.

• Solid understanding of security frameworks (e.g., NIST, OWASP), change management, and ITIL processes.

• Experience in creating and maintaining documentation, SOPs, and audit artifacts.

• Strong attention to detail with an emphasis on compliance, traceability, and audit readiness.

• Capability to obtain a Public Trust Security Clearance.

🏝️ Benefits

• Competitive compensation and benefits packages, including paid vacation.

• Medical coverage.

• Dental insurance.

• Vision coverage.

• Matching 401K plan.

• Tuition/training reimbursement.

• Long & Short-Term Disability benefits.