Devops Software Engineer

Mid-Level Software EngineerWe're hiring a mid-level Software Engineer with strong Python, Flask, and DevSecOps skills to build secure, reliable REST APIs for enterprise/government programs. This role owns features end-to-end, strengthens CI/CD with continuous security, and partners with product, security, and operations to deliver compliant, production-grade services.Key Responsibilities:Design, develop, and maintain Flask-based REST APIs and backend servicesImplement secure data access layers and authentication/authorization (e.g., OAuth2/JWT)Build and improve CI/CD pipelines (automated builds, tests, deployments) with integrated security scanningCreate and maintain automated tests (unit/integration/API) and maintain quality gatesContainerize services (e.g., Docker) and support deployment/orchestration patterns as neededUse infrastructure-as-code (e.g., Terraform/Ansible) and configuration management best practicesIntegrate and act on security scanning (SAST/DAST/SCA); remediate findings and follow secure coding practicesImplement secrets management using approved vault/secret managers; enforce least privilegeImplement logging/metrics/monitoring; support alerting and dashboardsSupport incident response/on-call rotations, perform root-cause analysis, and contribute to postmortemsParticipate in Agile/Scrum ceremonies, code reviews, and engineering standardsProduce and maintain documentation (API docs, designs, runbooks, compliance artifacts)Basic Qualifications:3-6 years of professional software engineering experienceStrong proficiency in Python and Flask building secure RESTful APIsSolid understanding of security fundamentals (authN/authZ, OWASP Top 10 concepts, key/secret handling)Hands-on experience with Git, Linux, Docker, and CI/CD pipelinesProficiency with automated testing practices and frameworksExperience with databases and data modeling (SQL/ORM; e.g., PostgreSQL/MySQL)Familiarity with infrastructure-as-code and cloud services (AWS/Azure/GCP)Experience with logging/monitoring and operational best practicesStrong communication skills and ability to collaborate with cross-functional teamsOptional (if required by program): eligibility to obtain and maintain a U.S. government security clearancePreferred Qualifications:Experience with Kubernetes/OpenShiftExperience with Terraform/Ansible and secret managers (e.g., Vault or cloud-native equivalents)Familiarity with OAuth2/OIDC, SSO, and API gateway patternsHands-on with SAST/DAST/SCA tooling and SBOM practicesPerformance tuning and scalability experience for Flask services#CJJOBS Marathon TS is committed to the development of a creative, diverse and inclusive work environment. In order to provide equal employment and advancement opportunities to all individuals, employment decisions at Marathon TS will be based on merit, qualifications, and abilities. Marathon TS does not discriminate against any person because of race, color, creed, religion, sex, national origin, disability, age or any other characteristic protected by law (referred to as "protected status ").