DevSecOps Engineer

The Technical Lead will direct the team in the design, development, and implementation of CI/CD solutions, ensuring adherence to the USPTO DevSecOps Policy. Key responsibilities include overseeing the CI/CD pipeline, managing infrastructure as code using tools like Ansible and Terraform, and conducting security assessments. Essential technical skills include hands on experience with GitLab CI/CD, proficiency in containerization technologies, and configuration management tools. The ideal candidate possesses a bachelor’s degree in a related field, 8+ years in software development, with 3 years in a leadership role, and strong leadership and communication skills.

ADP is the platform that facilitates the CI/CD services by leveraging the latest CI/CD toolchains, containerization technologies, and utilizes USPTO approved internal and external cloud solutions. SCDAD seeks to continue to advance its ADP platform with the implementation of pipeline as code. This will empower agile development teams by providing them the freedom to take control of their application development activities throughout the DevSecOps pipeline, while adhering to the USPTO DevSecOps Policy. SCDAD’s goal is to make available a platform that ensures all Agile Teams deliver business value to their product owners and application users/customers.

Responsibilities:

- Strong experience with CI/CD tools like GitLab CI/CD, Jenkins, and AWS.
- Proficiency in containerization technologies such as Docker/Podman, ECS, and Kubernetes.
- Hands-on experience with configuration management tools like Ansible and Terraform.
- Familiarity with code quality tools like SonarQube and Nexus RM/IQ.
- Experience with Agile project management tools like Rally.
- Strong programming skills in Java, Python, and JavaScript.
- Experience with scripting languages like Powershell.
- Familiarity with NoSQL/Object Databases and Relational Databases.
- Experience with performance testing tools and methodologies, including automated performance, load, stress, integration, and functional testing.
- Knowledge of security controls and best practices, including SAST, DAST, and IAST.
- Experience with monitoring tools like Splunk and Tableau.
- Familiarity with Okta / ICAM technologies and products.