Description
We are seeking a Senior DevSecOps Engineer to support the Administrative Office of the United States Courts (AOUSC). The successful candidate will work as part of the PACER Development team, responsible for developing, operating, and supporting internal and external systems that allow for secure public access to court electronic records for the Judiciary.
The Senior DevSecOps Engineer will:
- Develop, maintain, and support products such as PACER account registration and management, PACER authentication, PACER billing, and the PACER Case Locator
- Monitor continued compliance with Payment Card Industry (PCI) and other security standards through secure development practices
- Conduct requirements gathering, design, analyze, develop, test, deploy, support, and maintain systems across the software development lifecycle
- Develop and maintain enterprise-class software systems using C, Java, JSF, PrimeFaces, JavaScript, CSS, and/or Linux shell
- Develop secure web services utilizing standards such as SOAP, REST, WSDL, XSD, XML, and/or JSON
- Independently and collaboratively design and create efficient, scalable, and resilient software solutions
- Create and document use cases, test cases, and system validation results
- Participate in an Agile work environment including planning, retrospectives, demos, and stand-ups
- Review and validate functional requirements, system descriptions, and design artifacts, and prepare complete documentation packages
- Review project-related documentation and modification requests, and provide impact/feasibility analysis
- Define, document, and maintain system and software architectures, ensuring alignment with enterprise standards and supporting integration across internal and external systems
- Implement secure engineering practices, vulnerability remediation, and compliance activities such as ATO, PCI, and FISMA
- Conduct performance analysis, capacity planning, and system tuning; design and test continuity of operations (COOP) and disaster recovery (DR) capabilities
- Manage software configurations, version control, and source code repositories; participate in change control process
- Provide knowledge transfer, training, and documentation for Technical Points of Contact
- Evaluate and recommend emerging technologies, frameworks, and tools to improve efficiency, reduce technical debt, and sustain system viability
Requirements:
- 5+ years of experience in IT system engineering, systems development, systems coding, and programming
- Bachelor's degree in computer science, Software Engineering, or related field
- Comprehensive knowledge of security compliance and security control
- Proficient skills in C, Java, JSF, Tomcat, PrimeFaces, JavaScript, CSS, and/or Linux shell
- Strong experience implementing and supporting end-to-end automated DevSecOps pipelines and processes
- Strong experience in RedHat Linux
- Strong experience in and understanding of Cloud APIs and Cloud technologies with some programming experience
- Strong experience with providing engineering support for software applications in the full DevOps pipeline
- Demonstrated ability to adapt to different enterprise security requirements
- Experience with DevOps tools (Jira, Confluence, GitLab CI/CD, GitHub Actions, Jenkins, Bash, Subversion, JetBrains Tool Suite)
- Experience as a platform team developer who develops and manages the CI/CD pipelines of a wide variety of applications
- Experienced in providing DevSecOps implementation using Jenkins, Gitlab, or similar tools
- Experienced in developing, testing, and maintaining containerized applications
- Working knowledge of source version control, build/release tools and methodologies, and CI/CD pipelines
- Working knowledge of Software Build process
- Strong "security first" mindset
- Strong experience in and understanding of Cloud APIs and Cloud technologies with some programming experience
- In-depth knowledge of agile methodologies
- Preferred: Perl
The likely salary range for this position is $114,750 - $155,250.