Software Developer/ Systems Software Virginia with Security Clearance
2HB Incorporated
2024-11-07 10:44:40
Chantilly, Virginia, United States
Job type: fulltime
Job industry: I.T. & Communications
Job description
This is a full-time position, and requires a TS/SCI/Full Scope Polygraph Clearance. 2HB Incorporated is seeking a System Engineer to support its government customer in Chantilly, VA. The Candidate shall determine how requirements are satisfied. The Candidate shall ensure that all developed applications and modifications to existing US Government (USG) applications operate in compliance with applicable USG-specific standards. Planned activities shall be coordinated with all stakeholders and approved by the USG. Software Development The Candidate Team shall: Implement CI/CD designs for applications being supported in the CI/CD pipeline. Maintain and maintain DevSecOps solutions. Support customer adoption plans of DevSecOps processes and tools. Write software delivery pipelines. Create reusable libraries that can be applied across the Sponsor's organization. Facilitate implementation of Sponsor's DevSecOps approach. Support individual team adoption of the Sponsor's DevSecOps approach. Continually evaluate the DevSecOps approach with current industry standards, with a focus on automation, security, and performance. Define the DevSecOps process changes, governance, and standards. Document the DevSecOps process changes, governance, and standards. Assist Sponsor to identify, evaluate and adopt technologies to improve business applications and support operations. The Candidate shall provide the following Critical Core Competencies which represent specialized skills, experience and institutional knowledge deemed vital to executing contract requirements. Cloud Services The Candidate shall deploy, operate and maintain USG's DevSecOps solution within its Cloud Computing space, and consider approaches to software solutions that maximize the diversity of environments available and optimize cloud solutions based on cost, flexibility and suitability to the software solution. DevSecOps, Continuous Learning and Knowledge Sharing Culture The Candidate shall embody the Sponsor's DevSecOps culture that encourages the inclusion of security and operations considerations throughout the software development lifecycle. The Candidate shall also embrace continuous learning of software development best practices and sharing of acquired knowledge across the Sponsor's organization. Change Management, Operations, Security and Service Provider Partnerships The Candidate shall embrace and further deploy cross-organizational relationships with Security, Operations and enterprise tool providers to maximize efficiencies and effectiveness of the CI/CD pipeline. Agile Development and Software Standards The Candidate shall adhere to the Sponsor's Agile Maturity Model and ensure that all code written adheres the USG's published Technical Directives. As trusted advisors to Sponsor's Technical Leadership, the Contractor shall proffer additions and modifications to further elevate software quality. Managed Container Solutions The Candidate shall use the USG's available managed container solutions such as "Containers-as-a-Service" or "Container Linux Application Service". REQUIRED SKILLS The Candidate shall ensure, for the duration of the contract, that contractor personnel assigned to work under this contract maintain institutional knowledge and competency level necessary for all required skills, to include demonstrated on-the-job experience. The Candidate shall possess and provide the following required skills and demonstrated experience: Demonstrated experience implementing DevSecOps CI/CD pipelines to support a multi-tenant environment, incorporating automated software quality checks, security scanning, infrastructure-as-code, and other modern DevSecOps tools and practices. Demonstrated experience marrying Agile development methodology with modern DevSecOps methodologies at scale. Demonstrated experience implementing of end-to-end automation of a CI/CD pipeline from build through deploy. Demonstrated experience designing and implementing modern secure resilient applications. Demonstrated experience implementing Security best practices. Demonstrated experience in platform and application automated deployment. Demonstrated experience with configuration management. Demonstrated experience completing the ICD503 process. Demonstrated experience using AWS to include S3, EBS, and EC2. Demonstrated experience with containerization technologies such as Kubernetes, Rancher (RKE2). Demonstrated experience using requirements tracking programs such as JIRA or Confluence. Demonstrated experience using SQL. Demonstrated experience scripting using Python or Javascript. Demonstrated experience programming using Java and Spring. Demonstrated experience with DevSecOps and DevSecOps related tools such as GitHub, Jenkins, Maven, and Puppet. Demonstrated experience developing DevSecOps metrics such as Lead time and Deployment Frequency. Demonstrated experience operating, configuring and maintaining Nexus and Jenkins to support enterprise delivery and operations, as well as availability requirements. Demonstrated experience integrating and deploying application performance monitoring such as AppDynamics. Demonstrated experience presenting and communicating technical designs and implementations to non-technical audiences. Demonstrated experience modernizing legacy software through as-is assessments and identification of technical debt. Desired Skills and demonstrated Experience Demonstrated experience implementing automated integration with USG's IT Operations change management platform and adhering to its business operation processes. Demonstrated experience using other, non-AWS cloud service providers. Demonstrated experience performing DevOps practices with COTS. Demonstrated experience implementing Secrets Management and Automation such as Hashicorp Vault. Demonstrated experience implementing SonaType IQ. Demonstrated experience using data produced by CI/CD processes for Machine Learning to gain insights about the pipeline (DevML, OpsML). This is a full-time position, and requires a TS/SCI/Full Scope Polygraph Clearance.