DevSecOps Engineer

Maximus is seeking a DevSecOps Engineer to provide expertise to a federal client in support of mission-critical systems in defense of our Homeland.

As a key member of the team, the DevSecOps Engineer will integrate security practices throughout the software development lifecycle while advancing the reliability, automation, and security of mission-critical systems.

We offer flexible work arrangements to support employees while meeting client and program requirements.

Relocation assistance is available to eligible candidates who currently live more than 50 miles from the applicable work location in Colorado Springs, CO.

Active Secret Security clearance required.

Maximus TCS (Technology and Consulting Services) Internal Job Profile Code: TCS088, T4, Band 7

Job-Specific Essential Duties and Responsibilities:

- Innovate and develop cutting-edge solutions through automation, including Infrastructure as Code, DevSecOps tools, CI/CD, code quality, security, and monitoring.

- Review, update, and create Chef cookbooks daily to support automated configuration management, infrastructure consistency, and secure system deployments.

- Develop, maintain, and execute Ansible playbooks to automate configuration management, system provisioning, application deployment, and operational tasks.

- Use Ansible Satellite to support automated patching, configuration enforcement, system lifecycle management, and infrastructure compliance activities.

- Support virtualization and infrastructure operations using VMware vSphere and vCenter, including virtual machine, template, snapshot, resource allocation, and environment automation activities.

- Support and maintain Chef-based automation, including Chef Automate and Chef Ruby, to ensure repeatable, reliable, and compliant infrastructure configurations.

- Apply knowledge of HashiCorp Vault to support secure secrets management, credential storage, access control, and integration with automated deployment workflows.

- Ensure infrastructure, services, and applications meet security, monitoring, performance, and service-level standards.

- Release production code and develop Platform as a Service and Software as a Service solutions.

- Collaborate with development, operations, and cross-functional teams to design, implement, and maintain secure, automated infrastructure that complies with applicable security standards and regulatory requirements.

- Implement security best practices throughout the software development lifecycle, including code scanning, vulnerability assessment, threat modeling, static and dynamic analysis, and security testing.

- Develop and maintain CI/CD pipelines that enable continuous integration, continuous delivery, and continuous deployment.

- Develop and maintain containerized applications and microservices.

- Automate and orchestrate security processes, including incident response and threat detection, using technologies such as Splunk, Chef Automate, and Ansible.

- Participate in a on...