[Hiring] Principal Cloud Developer with DevSecOps Experience @General Dynamics Information Technology

Role Description

Seize your opportunity to make a personal impact supporting the Case Management Modernization (CMM) Program. The CMM program is an initiative to support the Administrative Office of the US Courts (AO) in developing a modern cloud-based solution to support all 204+ federal courts across the United States.

The Sr. Cloud Developer with DevSecOps Experience will work as part of the CMM Enterprise Data Warehouse (EDW) team to deploy a secured cloud-native EDW platform and support the statutory and operational reporting, data cataloging, and other analytical objectives.

Responsibilities

• Provide DevSecOps platform services that integrate security, compliance, and monitoring into all phases of cloud infrastructure and data products lifecycle management.
• Integrate IT Security Office approved-automated security controls, orchestrating vulnerability management, administering policy compliance, and providing continuous monitoring.
• Maintain secure and stable systems that enable continuous integration and delivery and reduce operational risk and support enterprise agility.
• Perform continuous scanning of all source and executable repositories for evolving threats detected after services are implemented.
• Ensure all code and IaC changes are version-controlled, peer-reviewed, security-scanned, and approved before promotion to production.
• Maintain continuous monitoring and alerting for all production deployments, with rollback procedures in place.
• Provide CI/CD pipeline and workflows for building, testing, and deploying.
• Promote workloads across environments with automated controls and approvals.
• Integrate security and compliance checks into CI/CD pipelines.
• Document all DevSecOps processes, standards, and toolset configurations, and maintain version-controlled documentation accessible to stakeholders.
• Integrate change control gates into the automated CI/CD workflow, with appropriate controls to prevent unauthorized or unreviewed code deployments to production.
• Coordinate with AO teams to establish and maintain standards for DevSecOps processes and toolsets, ensuring integration and interoperability across the enterprise ecosystem.
• Facilitate integration with third-party development, operations, and security tools to enable end-to-end visibility and control.
• Provide comprehensive end-user guides and training content for containerized pipeline features and security practices for the development team members.
• Conduct regular review and updates of DevSecOps practices and toolsets to incorporate emerging technologies, threat intelligence, and lessons learned.
• Create DevSecOps metrics reports (example: deployment frequency, mean time to resolution, vulnerability remediation time) to demonstrate effectiveness and drive improvement.

This role will require you to obtain and maintain a Public Trust and will require you to provide onsite fingerprinting at a designated facility. This investigation may review personal and criminal behavior, financial conduct, foreign influence, as well as other adjudications.

Qualifications

• Technical Training, Certification(s), or Degree.
• 5+ years of experience in IT system engineering, systems development, systems coding and programming.
• Strong experience implementing and supporting end-to-end automated DevSecOps pipelines (CI/CD) and processes.
• Strong background in Infrastructure as code.
• Knowledge of large-scale infrastructure migration methodologies and techniques (IaaS/PaaS) including application migrations to cloud platforms (AWS).
• Experienced in developing, testing, and maintaining containerized applications.
• Comprehensive knowledge of security compliance and security control.
• This role will require Linux knowledge.
• Experienced in using DevSecOps implementation using Jenkins, Gitlab, or similar tools.
• Excellent presentation and communication (oral and written) skills.
• Consultant mindset with the ability to work with high level customer stakeholders and build excellent customer relationships.
• Experience identifying and applying industry tools, solutions, methods best practices, and emerging technologies.
• Strong analytical skills and problem-solving skills with the ability to formulate and communicate recommendations for improvement.
• Demonstrated ability to work effectively, independently, and as part of a team.
• At least one certification at any level for one or more of the following cloud platforms is required: Microsoft Azure, Google Cloud Platform, Amazon Web Services (AWS), or Oracle Cloud.

Requirements

• Must be able to pass a background check to obtain a position of Public Trust.
• Must be US Person (Green Card Holder, US Permanent Resident Alien, Refugee, Asylee, or US Citizen).

Benefits

• Comprehensive benefits and wellness packages.
• 401K with company match.
• Competitive pay and paid time off.
• Full flex work weeks where possible.
• Variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave.
• 15 days of paid leave per calendar year to be used for vacations, personal business, and illness.
• 10 paid holidays per year.
• Paid Family Leave program provides a total of up to 160 hours of paid leave in a rolling 12 month period for eligible employees.
• Short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available.