DevSecOps Engineer II - Division of Information Technology

Minimum Education

Bachelor's degree or equivalent experience

Minimum Experience

6

Summary

Oversees more junior staff and/or participates in a variety of functions to help maintain server, network, information security, and database systems essential for carrying out the responsibilities and daily activities of the Board. With limited supervision, solves highly complex client system and application issues. Stays up to date on new technologies, security standards, and other applicable best practices related to server, network, database administration, and information security. Provides recommendations based on server, network, database administration, and information security knowledge.

Duties and Responsibilities

• Oversees and/or participates in the installation, modification, enhancement, and/or management of systems and network resources to meet business requirements. This includes performing complex system maintenance to guarantee systems function with limited interruption.
• Oversees the review of systems designs to provide input on functional requirements, product designs, schedules, or potential problems.
• Oversees the process to ensure and/or participates in ensuring that technology solutions align with business needs and software requirements.
• Oversees and/or participates in the diagnosis of hardware and software problems and in the resolution of violations as they occur.
• Coaches junior staff to help them develop knowledge of Federal policies and guidelines that govern the confidentiality, integrity, and availability of systems and information management. Oversees junior staff’s research and/or completes research on IT security trends, system security standards, best practices, preventative measures, and disaster recovery processes. Develops system access profiles based on Board security standards.
• Oversees the maintenance of the security posture of systems through implementation of Board standards and industry best practices.
• With limited guidance, provides system and application support and consulting to clients. This includes resolving customer support issues by taking into account the Board’s and division’s technology standards.
• Oversees and/or participates in ensuring customer issues are resolved and enhances infrastructure and security systems with a bias toward customer experience.
• Oversees and/or completes the documentation and application of technical and administrative direction to identify functional characteristics of a system, control any changes to such characteristics, and support audits of systems, reports, results, and/or components to verify compliance.
• Provides subject matter expertise and guidance on the adoption of new technologies and tools by thinking strategically and holistically about current and future requirements.
• Oversees junior staffs’ research and/or completes research on technologies available in the market including components of cloud computing and one or more cloud technology platforms, in addition to on-premises computing technology, to support evaluating business requirements and determine which tools and services are best fit for a specific purpose. Proposes recommendations based on research, including identifying areas for improvement and which options will have a significant impact on technology direction.
• Oversees and/or participates in the development of technical documentation for systems and projects to provide direction, guidance, or instruction and/or summarize complex data and information in a succinct and compelling manner.

Responsibilities:

• Lead the design, build and evolution of enterprise DevSecOps platform enabling secure, scalable and repeatable solution delivery
• Ensure the security and integrity of the platform, identifying and remediating security vulnerabilities and weaknesses
• Collaborate with development teams to ensure seamless integration of the DevSecOps platform with their workflows and tools
• Develop and maintain technical documentation, standards, and guidelines for the DevSecOps platform
• Monitor and analyze platform performance, identifying areas for improvement and implementing optimizations
• Develop and implement security policies, procedures, and controls to ensure the confidentiality, integrity, and availability of the platform
• Collaborate with cross-functional teams, including security, development, and operations, to ensure alignment and integration of the DevSecOps platform
• Provide technical leadership and guidance to junior engineers and team members
• Stay up-to-date with industry trends, emerging technologies, and threats, applying this knowledge to continuously improve the DevSecOps platform