DevSecOps SME

Description

NexGen Data Systems is looking for a DevSecOps Cybersecurity SME who independently evaluates, selects, adapts, and modifies standard techniques and criteria to plan and conduct cybersecurity engineering assignments in conjunction with the appropriate platform teams. Independently plans, schedules, and conducts or coordinates detailed phases of engineering work through the selection and adaptation or modification of techniques, procedures, and criteria. Analyzes complex features of the engineering solution and applies principles and practices of the discipline or devises new approaches in problem solutions. Thoroughly reviews all results from assigned tasks and determine if outputs are complete, correct, integrated with project objectives, and adequately documented.  

Roles and Responsibilities: 

• Maintenance and sustainment of USMC Risk Management Framework packages to support the broader MCBOSS DevSecOps Pipeline effort and CI/CD efforts. 
• Responsible, in conjunction with platform administrators and operators, for the creation and sustainment of continuous authorization playbooks/guides/wikis needed to ensure users of the Appian Platform are kept within guardrails to reduce risk to their system. 
• Responsible for meeting Program Increment (~12week) deadlines to create and enhance their assigned platform. Responsible for reviewing the interconnection of their system with adjacent SCCA, pipeline tools, cloud services, and mission systems to identify risks or issues that require a resolution. 
• Responsible for creation and sustainment of internal guides/wikis needed to monitor, scan, modify and defend their platform. 
• Knowledge/Experience using HBSS, ACAS, Splunk. 
• Execute all efforts in a collaborative and Scaled Agile fashion while adhering to government-mandated fixed due dates. 
• Work with Agile teams (developers, testers, operators, and other production IT staff) to oversee code releases and deployments of capability. 
• Work with Agile teams (developers, testers, operators, and other production IT staff) to oversee releases and deployments. 
• Foster agile relationship between software development and IT operations, establish and refine Continuous Integration (CI) and automation (key processes, release schedules, and infrastructure designs) to create and release regular updates to products as quickly and efficiently as possible. 
• Attend and Participate in Periodic Large Scale Agile Planning events. 
• Support standard Agile ritual meetings (Sprint Planning, Daily Stand-ups, Backlog Grooming, Sprint Reviews, and Retrospectives) as necessary and assist Scrum teams in executing Sprints.  

Other Duties: Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.  

Requirements

Desired/Required Skills: 

• Ten (10) years with Masters degree or 14 years with Bachelor’s degree of professional experience with research, design, and development of computer and network software or specialized utility programs which may include database maintenance within an application area. 
• Must have experience applying programming concepts in a professional or academic setting and notable experience with applying modern software development methodologies (e.g. agile, DEVOPS/DEVSECOPS) in a professional or academic setting
• Master’s or Bachelor’s degree in quantitative field such as engineering or mathematics (e.g. Electrical Engineering, Computer Engineering, Computer Science, Software Engineering, Information Technology, Information Systems, or relevant field
•  Agile Developer certification or Certified Scrum Developer certification preferred.
• Work experience with leading the software implementation of complex systems given a high-level software architecture. 
• Translating the software architecture and requirements in to low-level designs and implementation strategies. 
• Selecting programming languages, frameworks, and tools appropriate to implement the software architecture and meet requirements.
• Leads one or more teams responsible for implementing software systems. Note: Experience may be achieved simultaneously.  
• Experience with RedHat Enterprise Operating Systems preferred
• Knowledge/Experience using HBSS, ACAS, Splunk 
• Top Secret T5 clearance required
• DoD 8570 IAT Level II compliance required
• Prefer prior experience with the Appian application service
• Experience with a range of automation and configuration management tools to maintain the system including but not limited to Ansible, SCCM, Jenkins, puppet, and others