Senior DevSecOps Engineer

About the role

Seeking a Senior DevSecOps Engineer to join a fully remote team supporting the Department of Veteran Affairs AI Pilot Teams. As a Sr. DevSecOps Engineer, you will own the stability, integrity, and security of the program's multi-environment CI/CD pipeline and cloud infrastructure. You will work directly with the Technical Leadership and Development Team to ensure secure, compliant, audit-ready releases across IL-4 environments. You will serve as the subject matter expert for Azure DevOps, deployment governance, environment configuration, cybersecurity remediation, and pipeline troubleshooting. This role is essential to enabling rapid, safe, and compliant delivery of mission-critical capabilities to the Army. This role requires experience operating in secure, regulated environments with strict change control, disciplined documentation, and enterprise-grade system responsibility.

Job Responsibilities

• Maintain and administer AIE CI/CD pipelines using Azure DevOps (ADO), ensuring secure, reliable, and compliant deployments across Salesforce Dev, Integration, Test, Staging, and Production environments.
• Troubleshoot deployment failures, metadata conflicts, configuration drift, and environment issues across Salesforce and AWS-hosted components.
• Resolve AWS infrastructure issues impacting Salesforce or integrations, including logging, APIs, services, networking, and performance.
• Facilitate break-fix releases and urgent deployments without violating governance, traceability, or compliance requirements.
• Address cybersecurity findings by applying patches, completing STIG requirements, remediating ACAS/Nessus findings, and documenting all actions.
• Support SAST/DAST tooling (Checkmarx) and ensure vulnerabilities are validated, tracked, and remediated.
• Maintain environment parity, refresh schedules, and configuration governance across all Salesforce orgs and supporting AWS services.
• Collaborate with MuleSoft and integration teams to manage API gateway changes, environment connections, certificates, secrets, and secure token handling.
• Produce and maintain audit-ready documentation, including deployment notes, configuration records, STIG checklists, remediation artifacts, and pipeline diagrams.
• Serve as the DevSecOps SME during sprint planning, reviews, and refinement, advising on deployment feasibility, sequencing, and technical risk.
• Ensure all DevSecOps work complies with DoD cybersecurity requirements, IL4 controls, and Connected Logistics quality and governance standards.

Required skills

Azure Kubernetes CI/CD pipeline development Infrastructure as Code Git version control SQL and NoSQL databases Federal security standards (FISMA, OWASP, zero-trust) Agile methodologies Automation scripting AI/ML integration


Preferred skills

BrownMM DevSecOps toolchain LangChain LangGraph Terraform Serverless frameworks


Education requirements

Degree

Bachelor

Major

Computer Science

Job Requirements

• Minimum 5 years of DevSecOps or environment administration experience supporting enterprise systems.
• Prior experience operating within DoD, federal, IL4/IL5, or other regulated secure environments, including adherence to auditing and governance requirements.
• Strong experience administering Azure DevOps (Boards, Repos, Pipelines, variable groups, deployment sequencing, work item traceability).
• Hands-on experience supporting Salesforce deployments (metadata deployment patterns, SFDX/CLI, package troubleshooting).
• Experience troubleshooting AWS infrastructure, including logs, endpoints, authentication, integrations, and performance monitoring.
• Demonstrated ability to interpret and remediate cybersecurity findings (ACAS, Nessus, STIGs).
• Experience partnering with cross-functional teams collaborating with developers, testers, architects, MuleSoft, operations, and security to move controlled releases through gated environments.
• Strong understanding of CI/CD principles, Git-based version control, environment governance, and branching strategies.
• Ability to produce clear technical documentation and maintain compliance artifacts required for audits, ATO upkeep, and quality reporting.
• Technical Skills
• Advanced CI/CD engineering using ADO Pipelines, including multi-stage deployments, secure configuration, artifact handling, and gated approvals.
• Deep understanding of Salesforce DevOps (SFDX/CLI, metadata management, dependency resolution, rollback strategy, multi-org deployment patterns).
• Strong Git proficiency with disciplined branching, pull requests, merge strategies, and code-quality gates.
• Hands-on AWS operations (logging, networking, IAM fundamentals, service monitoring, diagnosing infrastructure failures influencing Salesforce or integrations).
• Cybersecurity tooling expertise (Checkmarx, ACAS/Nessus, STIG interpretation and remediation workflows).
• Integration support proficiency (MuleSoft deployment coordination, secure connectivity, certificate & token management, API gateway changes, event/log monitoring).
• Environment governance discipline (sandbox refresh coordination, configuration integrity, naming standard enforcement, controlled deployment sequencing).
• Ability to produce audit-ready artifacts, including configuration baselines, deployment plans, remediation documentation, and security control evidence.
• Certifications
• Security+ or equivalent DoD 8570 certification.
• Behavior, Leadership & Communication.
• Calm, structured, analytical problem-solving during deployment failures, break-fix releases, or security remediation events.
• Strong ownership mindset with accountability for pipeline integrity, environmental stability, and compliance adherence.
• Clear, direct communication with the ability to explain risks, environmental issues, and required remediation to both technical teams and government stakeholders.
• Disciplined adherence to governance, documentation, version control, and IL4/IL5 security requirements.
• Collaborative team member who partners closely with the Technical Lead, Architect, Senior Developer, and Senior Tester without friction or ego.
• Comfortable acting as the DevSecOps SME during refinement, planning, release discussions, and security reviews.
• Sound judgment on when to escalate issues, request approvals, or enforce guardrails to protect system integrity.
• What Sets You Apart:
• Experience supporting Salesforce in a multi-org or multi-environment enterprise model.
• Familiarity with Salesforce Shield (Event Monitoring, Encryption, Logging) and Cloudflare
• Experience with MuleSoft deployment coordination, API gateway configuration, or integration security.
• Hands-on experience automating quality gates, SAST/DAST pipelines, or compliance workflows.
• Additional DoD 8570 certifications or cloud security credentials.
• Experience operating within Agile/Scrum frameworks with a clear understanding of DevSecOps responsibilities.
• Certifications:
• AWS Cloud Practitioner (or higher).
• Azure Fundamentals.
• Salesforce Platform App Builder, DevOps Center certifications, or SFDX-focused credentials.
• Any CI/CD, DevOps, or DevSecOps certification demonstrating formal practice in secure pipeline operations.