DevSecOps Engineer

Maximus is seeking a Dev Sec Ops  Engineer to provide expertise to a federal client in support of mission-critical systems in defense of our Homeland. As a key member of the team, the Dev Sec Ops  Engineer will integrate security practices throughout the software development lifecycle while advancing the reliability, automation, and security of mission-critical systems.

Maximus TCS (Technology and Consulting Services) Internal Job Profile Code: TCS
088, T4, Band 7

• - Innovate and develop cutting-edge solutions through automation, including Infrastructure as Code, Dev Sec Ops  tools, CI/CD, code quality, security, and monitoring.
• - Review, update, and create Chef cookbooks daily to support automated configuration management, infrastructure consistency, and secure system deployments.
• - Develop, maintain, and execute Ansible playbooks to automate configuration management, system provisioning, application deployment, and operational tasks.
• - Use Ansible Satellite to support automated patching, configuration enforcement, system lifecycle management, and infrastructure compliance activities.
• - Support virtualization and infrastructure operations using VMware vSphere and vCenter, including virtual machine, template, snapshot, resource allocation, and environment automation activities.
• - Support and maintain Chef-based automation, including Chef Automate and Chef Ruby, to ensure repeatable, reliable, and compliant infrastructure configurations.
• - Apply knowledge of Hashi Corp Vault to support secure secrets management, credential storage, access control, and integration with automated deployment workflows.
• - Ensure infrastructure, services, and applications meet security, monitoring, performance, and service-level standards.
• - Release production code and develop Platform as a Service and Software as a Service solutions.
• - Collaborate with development, operations, and cross-functional teams to design, implement, and maintain secure, automated infrastructure that complies with applicable security standards and regulatory requirements.
• - Implement security best practices throughout the software development lifecycle, including code scanning, vulnerability assessment, threat modeling, static and dynamic analysis, and security testing.
• - Develop and maintain CI/CD pipelines that enable continuous integration, continuous delivery, and continuous deployment.
• - Develop and maintain containerized applications and microservices.
• - Automate and orchestrate security processes, including incident response and threat detection, using technologies such as Splunk, Chef Automate, and Ansible.
• - Participate in a one-week-per-month on-call rotation to support emergency page-outs, incident response, and mission-critical operational needs.
• - Stay current with emerging Dev Sec Ops  trends, tools, and practices and recommend appropriate new technologies.
• - Provide mentorship and guidance to junior engineers on Dev Sec Ops  practices and techniques.

• - Due to federal, agency, and contract requirements, candidates must be U.S. citizens.
• - 12+ years of experience as a Dev Sec Ops  Engineer or in a related field.
• - Daily hands-on experience reviewing, updating, and creating Chef cookbooks.
• - Experience with Chef, Chef Automate, and Chef Ruby for configuration management and infrastructure automation.
• - Experience developing, maintaining, and executing Ansible playbooks for automation, configuration management, and deployment activities.
• - Experience with Ansible Satellite for system management, patching, configuration enforcement, and compliance support.
• - Experience with VMware vSphere and vCenter for virtual infrastructure management, provisioning, and automation.
• - Knowledge of Hashi Corp Vault for secrets management, credential lifecycle management, and secure application and infrastructure integration.
• - Experience with one or more of the following:
  Docker Enterprise, Splunk, Chef, Chef Automate, Chef Ruby, Puppet, Ansible, Ansible Satellite, Kubernetes, Open Shift, VMware vSphere, or VMware vCenter.
• - Hands-on experience with Terraform, Jenkins Groovy scripts, and Python.
• - Candidates must reside within a commutable distance for daily onsite work and on-call requirements.
• - This contract supports systems that require 24x7x365 uptime. Candidates must be willing and able to meet recall requirements, including…