DevSecOps Engineer - Mid

DecisionPoint is seeking an experienced DevSecOps Engineer to join our team on an upcoming project. DevSecOps Engineer is to adapt Agile development methods across the full organization value stream by unifying software development, security gates, and operations. A primary responsibility will be to support the automation and monitoring across the software development lifecycle from development, integration, testing, and release to deployment, as well as infrastructure management and Infrastructure as Code (IaC). The DevSecOps Engineer supports, analyzes, tests, troubleshoots, and updates the software implemented to develop and deploy a suite of web applications in support of the company's business objectives. The DevSecOps engineer plays a key role in the program's success, particularly in relation to the development and operational environment and end-to-end code functionality in interacting with external web services, data sources, etc. The right candidate will demonstrate the ability to develop, inspire and share a vison of continually delivering solutions supporting deploy ability, modifiability, testability, and monitorability. The DevSecOps Engineer must also be able to balance numerous responsibilities of supporting multiple development and service teams focused on dependable releases, in close alignment with business objectives.

Monitor and enhance our existing DevSecOps pipelines for optimal availability and performance.
• Discover and identify bottlenecks that impact cycle time or cost, and then quickly resolving them during the solution, design, and development phase.
• Provide inputs and solutions pertaining to design, testing, automation, API integration, and the implementation of security.
• Design, develop, enhance, and implement applications and tools supporting development teams.
• Research, test, build, and coordinate the conversion and/or integration of new products based on client requirements.
• Design/develop new ancillary software products or enhancements to existing ones.
• Address problems of systems integration, compatibility, and multiple platforms.
• Consult with project teams and end users to identify application requirements.
• Assist in the evaluation and recommendation of application software packages, application integration and testing tools.
• Resolve problems with software and respond to suggestions for improvement.
• Troubleshoot production problems related to software applications.
• Positively influence change with internal and external teams.
• Guide, instruct and check the work of software developers on development teams.

• Active Secret security clearance.
• Bachelor’s degree related to computing, or the equivalent years of experience working in the related technical field with 4 years of related work experience.
• DoD 8570 IAT II Certifications (Sec CE)
• Experience with Java, JavaScript, SQL, XML, Scripting Languages, HTML, and CSS.Experience with Linux and Windows environments.
• Working knowledge of meeting DOD IT security compliance requirements such as Security Technical Implementation Guides (STIGs).
• A motivation to continually improve environment support and deployment processes using automation and technology.
• The ability to apply their expertise on multiple complex work assignments requiring originality and innovation in determining how to accomplish.
• The ability to help resolve complex integration issues across multiple teams and external business partners that enhance productivity and grow business relationships.
• Demonstrated experience using and supporting all or some of the following:
• Developer tools including IntelliJ, Node, Gradle, and Git
• Testing enterprise services with SoapUI and Postman
• Security Appliances including IBM DataPower
• Identity Management and Authentication system utilizing SAML and JWT
• Dependency/Artifact Management Tools including Artifactory, Nexus and NPM repository
• Continuous Build and Integration tools including Jenkins CI
• Container tools including Kubernetes, Istio, and Docker
• AWS system administration
• Cloud Development and Deployments to AWS
• Test Automation tools providing testing of source code for quality and security including Selenium, Cypress, SonarQube, and Fortify
• Continuous monitoring tools for development environments including CloudTrail, CloudWatch and EFK (Elasticsearch, Fluent, Kibana)
• Virtual Machines and basic networking
• Team Collaboration tools including VersionOne (Digital.IO), Jira, and Confluence
• Experience in DoD or other federal agencies providing IT/software services.
• Knowledge of the Agile Principles and SAFe.