- Washington, District of Columbia, United States
- On-site
- Full-time · Senior
- $135K–$216K per year
- 8+ years
Architect and lead the development of the enterprise security compliance automation infrastructure for a Department of Justice customer, developing the cloud-based automation framework enabling continuous, pipeline-driven ATO package production using DevSecOps best practices.
Compensation
$135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
Responsibilities
- Architect the enterprise integration layer connecting all five pipeline components: Heimdall Server, MITRE SAF CLI, Compliance Trestle, OSCAL-CLI, and GRC platform ingestion layer
- Design and implement automated data flows from all scan sources (Tenable, Splunk, AD/Azure AD, Guardium, WebInspect, NMAP) to OSCAL artifacts and the GRC platform
- Implement DevSecOps best practices: CI/CD pipelines, automated security testing gates, Infrastructure as Code, and OPA-based automated compliance checking
- Develop and implement cloud applications supporting the pipeline in AWS GovCloud (IL5) and AWS Secret Region (IL6); manage cloud policies, availability design, and security architecture
- Provide strategies for failure/recovery and cost optimization; establish coding standards, security practices, and API contracts; lead code reviews; mentor junior and mid-level developers