DevSecOps Engineer Mid

Description

The company is a technology firm within global Accenture, working only with the US federal government. Its 13,000+ people serve clients in defense, national security, public safety, civilian, and military health.

This role supports software assurance across a federal agency's development pipeline. You will help design and run a secure DevSecOps setup that builds security testing and compliance automation into every stage of software development. You will work in an Agile/Scrum model alongside developers, security engineers, and compliance staff so security is part of the code from the first commit.

Responsibilities

• Analyze user needs, software requirements, and technical design documents, then help build solutions for automated compliance and security posture management.
• Apply Agile DevSecOps practices across plan, code, build, test, release, deploy, and monitor steps for new and changed applications.
• Help add security gates to CI/CD pipelines so software is checked before it reaches production.
• Find gaps in the agency's cybersecurity baseline through security engineering analysis, and recommend defenses such as encryption, access control, and identity management.
• Help write code that works with API-driven security tools to automate security tasks and reduce manual errors.
• Run integrated quality assurance tests on security functions and resilience, tracking defect dispositions and fixes.
• Support SAST and DAST testing, and work with development teams to resolve findings.
• Help maintain the CI/CD security architecture, pipeline documentation, and SOP artifacts so they stay current.

Requirements

• US citizenship.
• 3+ years of related experience, plus a BS degree or 4 years of additional experience in its place.
• At least 5 years in system administration, database administration, network engineering, software engineering, or software development with a cybersecurity focus, or a bachelor's degree plus 3 years in those fields.
• Experience with secure software development lifecycle practices, CI/CD security integration, and SAST/DAST.
• Familiarity with Agile/Scrum delivery.
• Hands-on experience with a modern CI/CD toolchain such as GitLab CI, Jenkins, Azure DevOps, or similar, in a security-gated pipeline.
• Scripting in Python, Bash, or PowerShell for security automation.
• Familiarity with container security and cloud-native application security.
• No task-specific certification is mandated in the PWS for this role. CompTIA Security+ or equivalent is recommended, in line with the PWS's general Security Engineer guidance.

Conditions

Base pay range of $65,900 - $126,000 USD applies in California, Colorado, Connecticut, Hawaii, Illinois, Maine, Maryland, Massachusetts, Minnesota, New Jersey, New York, Ohio, Vermont, Virginia, Washington, and the District of Columbia.

Actual pay depends on factors such as office location, role, skill set, and experience.

Applications are accepted on an ongoing basis, with no fixed deadline.

The company is committed to a culture where everyone is respected, feels they belong, and has equal opportunity.

Benefits

• Hands-on experience, certifications, and industry training to help you grow, learn, and thrive.
• A wide variety of benefits, with more information available from the employer.