SecDevOps Lead

Zolon Tech

🇺🇸 United States
Remote
Staff / Principal
15 hours ago

DevSecOps
Incident Response
CI/CD
Vulnerability Management
Terraform
Ansible
AWS GovCloud
FISMA
FedRAMP
FIPS
Agile
Devops
AWS
Git
Linux
CISSP
AWS Security Specialty

15 hours ago

Not scoredNo CV on file. Upload one and this job gets a score out of 100.Upload CV

Zolon Tech Inc. (Zolon) supports the Department of Homeland Security (Client) Office of the Chief Information Officer (OCIO) on the Digital Application Support Services (DASS) program, which operates, maintains, and enhances Client digital platforms including the Homeland Security Information Network (HSIN), Web Content Management as a Service (WCMaaS), and the Federal Emergency Management Agency (FEMA) Digital Communication Platform. Zolon is seeking aSecDevOps Lead to lead security automation, DevSecOps tooling, and incident response for HSIN, Client's primary information-sharing portal serving more than 100,000 users across 1,700 organizations.

Job Responsibilities:
Lead security compliance, automation, tooling, and incident response for HSIN environments.
Collaborate with infrastructure and cloud teams to research, develop, and enhance SecDevOps monitoring tools and processes.
Build and maintain CI/CD pipelines with integrated security scanning, vulnerability management, and remediation.
Automate infrastructure and configuration with Terraform and Red Hat Ansible in AWS GovCloud.
Support system integration, performance, security, Section 508, user acceptance, and test and evaluation activities with stakeholders and vendors.
Ensure compliance with Client 4300A, FISMA, FedRAMP, NIST SP 800-53, and FIPS 140-2/3 encryption requirements.
Track industry trends and recommend improvements to architecture, Agile, and SecDevOps practices.

Required Qualifications:
Bachelor's degree in Computer Science, Cybersecurity, or a related field.
Minimum of seven (7) years of DevOps, systems engineering, or security engineering experience, including at least three (3) years in DevSecOps.
Experience with security compliance frameworks, automation, and incident response.
Hands-on experience with AWS, Terraform, Ansible, Git, Red Hat Linux, and CI/CD tools.
Experience with vulnerability scanning and remediation tools.

Desired Qualifications:
Security certification (e.g., CISSP, Security+, AWS Security Specialty).
Experience supporting ATO packages and continuous monitoring.
Prior Client or HSIN experience.

Location:Remote/telework, subject to Government approval. Primary Government work location is Client, Springfield, VA.
Schedule: Core hours 8:00 a.m. – 6:00 p.m. ET, Monday–Friday; occasional after-hours support for incidents, releases, and emergencies.
Clearance: Client Public Trust (suitability/Entry on Duty); U.S. citizenship required.
Ability to obtain and maintain a Client Public Trust suitability determination.

SecDevOps Lead · Zolon Tech

Auto apply with Likeremote