Senior DevSecOps Engineers

SR DEVSECOPS ENGINEER

Seize your opportunity to make a personal impact supporting the Administrative Office of the United States Courts (AOUSC).  The AOUSC is responsible for providing oversight, supervision, and coordination of the court and judicial case management systems. These systems include the Judiciary’s Case Management/Electronic Case Files (CM/ECF) and Public Access to Court Electronic Records (PACER) systems.

The Senior DevSecOps Engineer will work as part of the PACER Development team responsible for developing, operating, and supporting internal and external systems that allow for secure public access to court electronic records for the Judiciary.

RESPONSIBILITIES

• Develop, maintain, and support products such as PACER account registration and management, PACER authentication, PACER billing and the PACER Case Locator as well as internal systems such as PACER Account Maintenance System, PSC Help Desk Support application, and Court PACER access reports
• Monitor continued compliance with Payment Card Industry (PCI) and other security standards through secure development practices
• Conduct requirements gathering, design, analyze, develop, test, deploy, support, and maintain systems across the software development lifecycle
• Develop and maintain enterprise-class software systems using C, Java, JSF, PrimeFaces, JavaScript, CSS, and/or Linux shell
• Develop secure web services utilizing standards such as SOAP, REST, WSDL, XSD, XML, and/or JSON
• Independently and collaboratively design and create efficient, scalable and resilient software solution
• Create and document use cases, test cases, and system validation results
• Participate in an Agile work environment including planning, retrospectives, demos, and stand-ups
• Review and validate functional requirements, system description, and design artifacts and prepare complete documentation packages
• Review project related documentation and modification requests and provide impact/feasibility analysis
• Define, document, and maintain system and software architectures, ensuring alignment with enterprise standards and supporting integration across internal and external system
• Implement secure engineering practices, vulnerability remediation, and compliance activities such as ATO, PCI, and FISMA
• Conduct performance analysis, capacity planning, and system tuning; design and test continuity of operations (COOP) and disaster recovery (DR) capabilities
• Manage Software configurations, version control, and source code repositories; participate in change control process
• Provide knowledge transfer, training, and documentation for Technical Points of Contact
• Evaluate and recommend emerging technologies, frameworks, and tools to improve efficiency, reduce technical debt, and sustain system viability

REQUIRED EXPERIENCE & QUALIFICATIONS

• 5+ years of experience in IT system engineering, systems development, systems coding and programming
• Bachelor’s degree in computer science, Software Engineering, or related field
• Comprehensive knowledge of security compliance and security control
• Proficient skills in C, Java, JSF, Tomcat, PrimeFaces, JavaScript, CSS, and/or Linux shell
• Strong experience implementing and supporting end-to-end automated DevSecOps pipelines and processes
• Strong experience in RedHat Linux
• Strong experience in and understanding of Cloud APIs and Cloud technologies with some programing experience
• Strong experience with providing engineering support for software application in the full DevOps pipeline
• Demonstrated ability to adapt to different enterprise security requirements.
• Experience with DevOps tools (Jira, Confluence, GitLab CI/CD, GitHub Actions, Jenkins, Bash, Subversion, JetBrains Tool Suite)
• Experience as platform team developer who develops and manages the CI/CD pipelines of a wide variety of applications
• Experienced in providing DevSecOps implementation using Jenkins, Gitlab, or similar tools
• Experienced in developing, testing, and maintaining containerized applications
• Working knowledge of source version control, build/release tools and methodologies, and CI/CD pipelines
• Working knowledge of Software Build process.
• Strong "security first" mindset
• Strong experience in and understanding of Cloud APIs and Cloud technologies with some programing experience
• In-depth knowledge of agile methodologies
• Preferred: Perl

COMMUNICATION

• Excellent presentation and communication skills.
• Consultant mindset, able work with high level customer stakeholders and build excellent customer relationships.
• Strong analytical and problem-solving skills, able to formulate and communicate recommendations for improvement
• Ability to work effectively, independently, and as part of a team.