DevSecOps Engineer

PhoenixTeam

DevSecOps Engineer

About Phoenix Team

Phoenix Team delivers technology, cybersecurity, and program management solutions to federal agencies, including the Department of Veterans Affairs. We are seeking a DevSecOps Engineer to support a project with the VA.

Position Summary

The DevSecOps Engineer will support an initiative that connects Salesforce, S-Docs, AWS, and VA Notify to deliver reliable, high-volume outbound Veteran communications — including case correspondence, notifications, and generated documents. The role spans solution assessment, hands‑on development, and DevSecOps delivery: evaluating whether the proposed architecture can meet high‑volume email and notification requirements, then building, testing, and deploying the integration components that make it work in production.

Key Responsibilities

Solution Assessment & Architecture

• Assess the end-to-end communication workflow across Salesforce, S-Docs, AWS, and VA Notify
• Evaluate S-Docs' ability to generate accurate, consistent HTML/PDF templates, and identify data dependencies, automation triggers, and governance controls needed to maintain template quality at scale.
• Examine AWS Lambda's processing capacity, queueing strategies (e.g., SQS, dead‑letter queues), and monitoring capabilities
• Validate the overall solution against operational expectations for scalability, security controls, auditability, observability, and enterprise compliance alignment.
• Document findings, architectural decisions, and identified risks/issues to support traceability and future governance reviews.
• Produce formal solution documentation — data flow diagrams, sequence diagrams, design considerations, and decision logs — to align technical teams, business stakeholders, and support groups.

Development & Integration

• Build and refine Salesforce data models, integration components, error‑handling logic, and orchestration needed to support end‑to‑end processing
• Implement AWS components such as API Gateway endpoints, Lambda functions, SQS queueing, dead‑letter queues (DLQs), logging/monitoring pipelines, and services that write delivery results back into Salesforce.
• Automate configuration management, secrets management, and access controls across the integration layer in accordance with federal security baselines and least‑privilege principles.
• Integrate application security scanning (SAST/DAST/SCA) into CI/CD pipelines supporting this and other integration workstreams.

Required Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field, or equivalent professional experience.
• Experience in DevOps/DevSecOps or software integration engineering roles, ideally supporting federal government or VA programs.
• Hands‑on Salesforce development experience, including Apex, Flow/Process Builder, Lightning Web Components, and REST/SOAP or Bulk API integration patterns.
• Experience with a Salesforce document‑generation/templating tool (e.g., S-Docs, Conga, or similar), including HTML/PDF template design, data dependencies, and automation triggers.
• Experience building serverless AWS integrations, including API Gateway, Lambda, SQS/DLQ patterns, and CloudWatch‑based monitoring and alerting.
• Experience designing or supporting high‑volume, fault‑tolerant integration pipelines (e.g., outbound email/notification systems), with attention to throughput, API limits, and latency.
• Practical experience integrating automated security testing (SAST, DAST, SCA) into build and release pipelines.
• Working knowledge of NIST SP 800‑53, the Risk Management Framework (RMF), FISMA, and the federal Assessment & Authorization / ATO process.
• Experience with automated testing practices, including high‑volume/load testing (50,000+ transactions) and regression test automation.
• Experience deploying through CI/CD pipelines across multiple environments (dev, QA, UAT, production), including tools such as GitLab CI, Jenkins, or Azure DevOps.
• Scripting and automation proficiency in Python, Bash, and/or PowerShell.
• Strong written communication skills, with the ability to produce solution documentation (data flow diagrams, sequence diagrams, decision logs) for both technical and government audiences.
• Must be a U.S. citizen and eligible to obtain and maintain a Public Trust clearance / favorable suitability determination.

Preferred Qualifications

• Direct experience with VA Notify or a similar notification‑as‑a‑service platform (e.g., GOV.UK Notify) for outbound email/SMS delivery and status/bounce reporting.
• Direct experience supporting VA programs, including familiarity with VA Handbook/Directive 6500, the VA Technical Reference Model (TRM), and the VA ProPath SDLC methodology.
• Salesforce certifications (e.g., Platform Developer I/II, Integration Architecture Designer) and/or AWS certifications (e.g., AWS Certified Developer, Solutions Architect).
• Experience with federal GRC/ATO management tools such as eMASS or Xacta.
• Experience with SIEM and log management tools (e.g., Splunk, ELK Stack) supporting continuous monitoring.
• Familiarity with Section 508 accessibility standards and testing tools.
• Experience with container technologies (Docker, Kubernetes/OpenShift) and Infrastructure as Code (Terraform, Ansible, or CloudFormation).
• Experience working within Agile/Scrum delivery teams on federal contracts.

What PhoenixTeam Offers

• The opportunity to support a mission that directly benefits Veterans and their families.
• A collaborative, security‑first engineering culture with investment in automation and modern tooling.
• Competitive compensation and benefits package. [Insert salary range / benefits summary]
• Professional development support, including certification and training reimbursement. [Confirm program specifics]

Additional Information

This position supports a U.S. federal government contract with the Department of Veterans Affairs and is contingent upon successful completion of a government background investigation. PhoenixTeam is an equal opportunity employer.