DevSecOps Engineer

Summary

6-12 month non-reimbursable assignment. The only compensation for this assignment is the federal salary you are already receiving. Cybersecurity Infrastructure Security Agency (CISA) DevSecOps Engineer Series Requested: 2210; 2230 Security Clearance: Public Trust Virtual/Remote: No Only current, full-time federal employees are eligible. Resumes are reviewed every 30 days until selection/closing date. This is a Detail, not a Developmental Rotation. Supervisory approval form must be signed.

Duties

• Provides technical leadership for cloud and application security platforms including Prisma Cloud, Wiz, and Checkmarx. Conducts cloud security posture assessments, application security testing, container and Kubernetes security reviews, and vulnerability analysis. Evaluates and prioritizes security findings, reduces false positives, and delivers actionable remediation guidance to development and platform engineering teams Supports enterprise artifact management and GitOps-based deployment practices by securing software supply chains, managing binary repositories, implementing vulnerability scanning and signature verification, and ensuring secure synchronization of code and infrastructure across cloud-native environments. Collaborates with cross-functional stakeholders to strengthen cyber resilience, improve secure-by-design engineering practices, and advance organizational DevSecOps maturity. Provide enterprise DevSecOps, cloud security, and secure software delivery expertise across development, security, and operations teams. Leads the integration of automated security controls into CI/CD pipelines, ensuring the continuous enforcement of security policies through automated scanning, vulnerability management, and Infrastructure as Code (IaC) validation while maintaining development velocity. Administers and secures enterprise software development and delivery platforms, including GitHub, GitHub Actions, CloudBees/Jenkins, Artifactory, and ArgoCD. Develops, configures, and maintains secure build and deployment pipelines, repository governance, access controls, secrets management, and shared automation frameworks that enable consistent and compliant software releases.

Qualifications

Qualifications required: Expertise in integrating automated security controls, including SAST, DAST, SCA, and Infrastructure-as-Code scanning, into CI/CD pipelines while enabling rapid and secure software delivery. Experience with vulnerability management, security tool optimization, and software supply chain security practices is essential. Advanced proficiency administering and securing enterprise development platforms such as GitHub, GitHub Actions, CloudBees/Jenkins, JFrog Artifactory, and ArgoCD. This includes implementing repository governance, secrets management, access controls, build automation, GitOps workflows, and artifact security. Strong experience with Terraform, CloudFormation, Kubernetes, containers, and cloud environments is required to support secure cloud and application deployment practices. Hands-on experience with cloud and application security platforms such as Wiz, Prisma Cloud, and Checkmarx, including cloud security posture management, application security testing, and container security. Should be capable of serving as a technical lead, providing strategic guidance to development and security teams, advancing secure-by-design principles, and driving enterprise-wide improvements in DevSecOps maturity and software supply chain resilience Please read the following important information to ensure we have everything we need to consider your application: It is your responsibility to ensure that you submit appropriate documentation prior to the closing date. Your resume serves as the basis for qualification determinations and must highlight your most relevant and significant experience as it relates to this Joint Duty assignment opportunity announcement. Be clear and specific when describing your work history since human resources cannot make assumptions regarding your experience. Your application will be rated based on your resume. Please ensure EACH work history includes ALL of the following information: Job Title (Include series and grade of Federal Job) Duties (Be specific in describing your duties) Name of Federal agency Supervisor name, email, and phone number Start and end dates including month and year (e.g. June 2007 to April 2008)

Education

EDUCATIONAL SUBSTITUTION: There is no educational substitution for this position.