Senior WebSphere​/DevSecOps Engineer Security Clearance

Position: Senior WebSphere / DevSecOps Engineer with Security Clearance
At Credence, we support our clients' mission-critical needs, powered by technology. We provide cutting-edge solutions, including AI/ML, enterprise modernization, and advanced intelligence capabilities, to the largest defense and health federal organizations. Through partnership and trust, we increase mission success for war-fighters and secure our nation for a better future. We are privately held, are repeatedly recognized as a top place to work, and have been on the Inc.

5000 Fastest Growing Private Companies list for the last 12 years. We practice servant leadership and believe that by focusing on the success of our clients, team members, and partners, we all achieve greater success. Position Summary We have an immediate need for a highly skilled Mid and Senior leveled Web Sphere/Dev Sec Ops  Engineer to support federal programs hosted on AWS Gov Cloud.

The primary role in based in McLean, VA, and requires expertise in Web Sphere and knowledge of Dev Sec Ops  best practices, cloud automation, security compliance, and continuous integration/continuous deployment (CI/CD) to enhance the security, scalability, and efficiency of mission-critical applications. Responsibilities include, but are not limited to the duties listed below
* Automate IBM Web Sphere Release and Patch Management

* Develop CI/CD pipelines (Git Lab, Jenkins, or equivalent) to handle automated packaging, testing, and deployment of Web Sphere updates.

* Implement patch orchestration using Terraform, Ansible, or Kubernetes manifests for containerized Web Sphere instances.

* Define rollback and version control procedures for Web Sphere configurations and custom JVM tuning parameters.

* Integrate Web Sphere deployments with Dev Sec Ops  tool chains (e.g., Gitlab, Sonar Qube, Nexus, Vault, Jira, and Service Now).

* Legacy Environment Upgrades and Rationalization

* Assess existing HCL Commerce versions (pre-9.x) and define upgrade paths to the latest supported release.

* Evaluate dependencies and migration blockers for outdated IBM suite components (Web Sphere ND, IHS, MQ, DB2).

* Recommend modernization or containerization strategies where possible.

* Produce impact and remediation plans for deprecated middleware components.

* Containerization and Cloud Integration

* Containerize IBM Web Sphere workloads using Docker and Helm charts for deployment on Amazon EKS or other Kubernetes distributions.

* Tune JVM parameters, configure IHS, and optimize application server clustering in Kubernetes environments.

* Work with AWS IAM, Secrets Manager, and ECR to manage secure container image pipelines and keystore integrations.

* IBM Suite Troubleshooting and Maintenance

* Perform deep-dive troubleshooting across IBM stack components (Web Sphere ND, MQ, IHS, and HCL Commerce).

* Infrastructure as Code (IaC) & Platform Alignment

* Create Terraform modules to define and provision underlying infrastructure (EC2, RDS, EKS, Load Balancers, VPC networking).

* Align deployment processes with Dev Sec Ops  governance models integrating with security scanning, configuration drift detection, and compliance baselines.

* Document architecture, topology, and operational playbooks for IBM Web Sphere and HCL Commerce components. Requirements

Minimum Requirements
* US citizenship with the ability to obtain successful DoD secret security clearance is required

* Mid level requires 5+ years of hands-on experience in Web Sphere, Dev Sec Ops , Cloud Engineering, or Infrastructure Automation roles.

* Senior level requires 7+ years of hands-on experience in Web Sphere, Dev Sec Ops , Cloud Engineering, or Infrastructure Automation roles.

* IBM Stack Expertise:

* IBM Web Sphere Application Server (ND, Liberty), IBM HTTP Server, IBM MQ, and HCL Commerce (7.x-9.x).

* Familiarity with IBM Installation Manager, Web Sphere Administrative Console (wsadmin scripting), and IBM Deployment Manager topologies.

* Understanding of IBM SSL/KDB keystore management, Jython/JACL scripting, and wsadmin automation.

* Modern Platform

Skills:

* Kubernetes / Amazon EKS experience, including Helm and YAML-based configuration management.

* Strong Terraform background for IaC deployment, with Git Lab CI/CD or Jenkins pipeline experience.

* Containerization (Docker), artifact repository management (Nexus/Artifactory), and Git Ops familiarity.

* Security & Compliance:

* Hands-on experience managing SSL certs, keystores, and Java truststores.

* Understanding of IAM integration between legacy and cloud-native components.

* Knowledge of patching and vulnerability management processes within a regulated or enterprise ecosystem.

* Security+, AWS Certified Security Benefits
* Health Care Plan (Medical, Dental & Vision)

* Retirement Plan (401k, IRA)

* Life Insurance (Basic, Voluntary & AD&D)

* Paid Time Off (Vacation, Sick & Public Holidays)

* Family Leave (Maternity, Paternity)

* Short Term & Long Term Disability

* Training & Development

* Work From Home

* Free Food & Snacks

* Wellness Resources