System Database Developer - SecDevOps

Description

* This position is contingent upon a future opening with Gunnison.

Salary: $130,000 - $145,000/year

Work location
:
Hybrid, 2-3 days per week on-site in Bethesda, MD.

• Design, develop, maintain, and secure enterprise applications, databases, automation workflows, and supporting infrastructure for NIH CIT systems and services.
• Implement Secure Dev Ops (Sec Dev Ops ) practices throughout the software-development lifecycle, integrating security requirements into planning, design, development, testing, deployment, operations, and maintenance.
• Develop and maintain CI/CD pipelines using tools such as Azure Dev Ops, Jenkins, Git Lab CI/CD, Git Hub Actions, AWS Code Pipeline, or comparable platforms.
• Build, maintain, and enhance database solutions using technologies such as Microsoft SQL Server, Oracle, PostgreSQL, MySQL, MongoDB, or other enterprise database platforms.
• Develop database objects and code, including schemas, tables, views, stored procedures, functions, triggers, queries, scripts, and data-integration processes.
• Apply secure-coding standards and remediate findings from static application security testing (SAST), dynamic application security testing (DAST), software-composition analysis (SCA), container scanning, infrastructure-as-code scanning, and manual code review.
• Support secure application and database design, including authentication, authorization, privileged access, encryption, secrets management, secure APIs, data masking, logging, auditing, backup, recovery, and high availability.
• Identify, analyze, prioritize, and remediate application, database, cloud, container, operating-system, and infrastructure vulnerabilities in coordination with cybersecurity, system owners, and engineering teams.
• Implement and maintain infrastructure-as-code and configuration-management solutions using tools such as Terraform, Ansible, Cloud Formation, ARM/Bicep, Chef, Puppet, or comparable technologies.
• Support containerized and cloud-native application environments using Docker, Kubernetes, Open Shift, AWS, Azure, Google Cloud Platform, or comparable technologies.
• Implement security monitoring, audit logging, and alerting for applications, databases, cloud services, and CI/CD pipelines; support integration with SIEM and vulnerability-management platforms.
• Ensure application, database, and Dev Ops activities comply with NIH, HHS, and federal cybersecurity requirements, including NIST RMF, NIST SP 800-53, secure development principles, configuration management, continuous monitoring, and vulnerability-management processes.
• Collaborate with developers, database administrators, cloud engineers, cybersecurity engineers, system owners, ISSOs, and program leadership to resolve technical issues and deliver secure solutions.
• Develop and maintain technical documentation, including system designs, data models, database design documents, deployment procedures, runbooks, configuration baselines, security documentation, and SOPs.
• Participate in code reviews, architecture reviews, release planning, sprint activities, change-control processes, incident-response support, disaster-recovery testing, and continuous-improvement initiatives.
• Produce technical status reports, vulnerability-remediation updates, operational metrics, and management briefings as required.

Minimum of three (3) to five (5) years of progressively responsible experience in systems development, database development or administration, Dev Ops, cloud engineering, software engineering, security engineering, or a closely related technical discipline.

Candidates should demonstrate experience in:

• Developing, administering, optimizing, or securing enterprise database platforms, preferably SQL Server, Oracle, PostgreSQL, MySQL, or equivalent.
• Writing SQL, stored procedures, functions, scripts, data-integration logic, and performance-tuning queries.
• Software development using one or more languages such as Python, Power Shell, Java, C#, JavaScript/Type Script, Bash, or similar languages.
• Building or supporting CI/CD pipelines and source-code management using Git and one or more Dev Ops platforms.
• Secure-coding practices, code review, application-security testing, vulnerability remediation, and software dependency management.
• Cloud, hybrid-cloud, container, virtualization, or infrastructure-as-code environments.
• Database security, including role-based access control, privileged-access management, encryption, audit logging, backup/recovery, and vulnerability remediation.
• Implementing or supporting NIST RMF, NIST SP 800-53 controls, secure configuration baselines, patch management, continuous monitoring, or federal cybersecurity compliance activities.
• Working in Agile/Dev Sec Ops  delivery teams and communicating technical risks, work status, and remediation recommendations to stakeholders.
• Bachelor’s degree from an accredited college or university in cybersecurity, computer science, information systems, software engineering, computer engineering, database administration, data…