Evergreen: DevSecOps Engineer

Position: Evergreen Posting: DevSecOps Engineer
Evergreen Posting:
Dev Sec Ops  Engineer

Department: Engineering

Employment Type: Full Time

Location: Remote (select US states)

Description

We are actively building a pipeline of talented individuals in anticipation of upcoming project needs. By applying to this evergreen position, you recognize that while an immediate vacancy may not exist, you are eager to be part of our future cross-disciplinary efforts to improve lives through human-centered technology.

Our Dev Sec Ops  Engineers enjoy tackling complex problems while working with other members of our cross-disciplinary teams to deliver elegant products across a modern technology stack. They are skilled experts across the stack, building accessible applications that put people first with code that is clean, maintainable, well-documented, and well-tested. They oversee builds, deployments, automated processes, and CI/CD pipelines, and are experienced at using infrastructure as code.

At Coforma, engineers work closely with researchers and designers throughout a project's lifecycle, collaborating to add perspective and increase understanding. As such, your passion for articulating technology solutions that aim to improve lives is a feature, not a bug.

Join us in building software that makes an impact and implementing human-centered solutions we can be proud to say we worked on together.

Note:

We're a remote-first organization, but some roles may require occasional travel. If a role has travel requirements or a hybrid or full time in-office schedule, this will be disclosed at the beginning of the hiring process.

We participate in E-Verify. Upon hire, we will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the United States.

Due to the nature of our work with the US federal government, all roles are required to work from the contiguous United States. Remote positions are open to applicants in the states listed below. To ensure we remain compliant with all state, county, and local employment and tax regulations, applicants must currently reside in one of the following states to be considered for employment with Coforma.

This list will be updated periodically as our People Ops team works to open up hiring in additional states.

• Arizona
• California
• District of Columbia
• Florida
• Georgia
• Idaho
• Illinois
• Maryland
• Massachusetts
• Montana
• Nevada
• New Jersey
• New York
• North Carolina
• Oregon
• South Carolina
• Tennessee
• Texas
• Virginia
• Washington
• Wisconsin

What You'll Do (Key Responsibilities)

• Write and review code, ensuring high standards of quality, maintainability, and test coverage
• Solve problems across the tech stack alongside other engineers on the team, building new systems and improving existing ones
• Lead other developers through ideation and articulation of solutions with an eye toward integration and reducing burden and tech debt
• Consistently apply best practices, including a focus on accessibility
• Collaborate with team members and government/client stakeholders to craft creative solutions and build technology products that improve the lives of those in the communities they serve
• Engage with coworkers across disciplines according to agile and Scrum methodologies, including participating in planning, breaking down requirements into tasks, refinement, and estimation, etc.

What You Know (Knowledge and Experience Requirements)

• Open-source programming languages, like JavaScript/Type Script, Ruby, Python, Java, etc.
• Frameworks, libraries, or runtimes, like React, Rails, Node, Next, Angular, Spring, etc.
• Testing frameworks like Jest, Testing Library, Mocha, Playwright, Cypress, etc.
• How to leverage the command line via shell scripting
• APIs and databases of various types, like SQL, Dynamo, Mongo, Postgres, etc.
• Infrastructure tools like Terraform, Serverless, Amazon CDK, etc.
• CI/CD tools like Git Hub Actions, Jenkins, Circle, etc.
• Cloud platforms like AWS, Azure, etc.
• Observability and monitoring tools like Datadog, Splunk, Sonar Qube, New Relic, Nessus, etc.
• Security best practices like vulnerability scanning and remediation, threat modeling and detection, and static and dynamic testing
• How to deliver polished, scalable, maintainable, performant code
• How…