Custom Software Systems, Inc. (CSS) is seeking a DevSecOps Engineer to support our clients' enterprise cybersecurity engineering program. You'll own the secure CI/CD lifecycle and the integration work that wires their cybersecurity tooling into a working, automated pipeline — building the automation, workflow libraries, and telemetry standards that let security scale without adding manual effort. This is hands-on engineering with enterprise scope and a heavy automation-and-integration focus.
Responsibilities
- Engineer secure CI/CD pipelines with security gates enforced in the pipeline, and integrate disparate security tooling (SIEM, scanners, ticketing) into automated, orchestrated workflows.
- Build and maintain the automation backbone: a version-controlled workflow/SOAR library, engineering runbooks and playbooks, and data-normalization and labeling standards across tools that don't natively agree.
- Harden and manage enterprise baseline configurations using infrastructure-as-code and configuration management at scale, with change control that survives an audit.
- Produce the recurring engineering deliverables this role owns — integration and schema documentation, monthly tool-optimization reporting, and audit-remediation and requirements-traceability artifacts.
- Support continuous security validation, vulnerability management, and incident response across cloud-native and hybrid environments.
Citizenship
· US Citizenship
Required Qualifications
- Minimum of ten (10) years of DevSecOps experience
- At least five (5) of those ten (10) years in cybersecurity and cloud security at a large government agency comparable in size and scope to VA, DoD, IRS, or GSA.
- Secure CI/CD pipeline engineering with in-pipeline security gates; integrating SIEM/scanners/ticketing into automated workflows; infrastructure-as-code and configuration management at scale; and data-normalization/schema work across disagreeing tools.
- S.-based; able to obtain and maintain the VA Tier 4 / High Risk Public Trust and PIV.
Certifications
- One current certification: IAT III, IAM III, or IASAE III ( CISSP preferred)
Preferred Qualifications
- Federal DevSecOps experience.
- Container and Kubernetes security.
- Experience retiring redundant tooling,
Compensation & Benefits[1][2]
- Wage Range: Negotiable
- General Benefits: Custom Software Systems, Inc. offers our employees a competitive benefits package that may include:
- Health insurance plans
- Health Savings Account (HSA)
- Dental
- Vision
- Long-term disability
- Short-term disability
- Basic term life insurance
- Supplemental term life insurance for employees, spouses, and dependents
- Simple IRA
- Parking/Commuting expense reimbursement
- Training/Education
[1] Compensation range must be coordinated with and approved by the CSS Chief Operating Officer (COO).
[2] Compensation & Benefits information is required for all Maryland Employers effective October 1, 2024.
Skills Required
- Minimum of 10 years of DevSecOps experience
- At least 5 years of cybersecurity and cloud security experience at a large government agency comparable to VA, DoD, IRS, or GSA
- Experience engineering secure CI/CD pipelines with in-pipeline security gates
- Experience integrating SIEM, scanners, and ticketing tools into automated workflows
- Experience with infrastructure-as-code and configuration management at scale
- Experience with data normalization and schema work across disparate tools
- US citizenship
- US-based
- Ability to obtain and maintain VA Tier 4 / High Risk Public Trust and PIV
- One current IAT III, IAM III, or IASAE III certification
- CISSP certification
- Federal DevSecOps experience
- Container and Kubernetes security experience
- Experience retiring redundant tooling
What We Do
Welcome To Custom Software Systems, Inc. About Custom Software Systems, Inc.: Headquartered in Leesburg, Virginia, Custom Software Systems, Inc. (CSS) is a certified Woman Owned Small Business (WOSB) and certified HUBZone Business. Built on a foundation of trusted client partnerships, CSS has fostered a “stakeholder-centric”, yet disciplined approach to IT solutions development. This ensures our ability to consistently deliver on time and within budget and to meet or exceed our customers’ expectations. Core Expertise: CSS specializes in developing and implementing Custom Software Solutions and Support Services which deliver high value to our customers. Our skilled team of consultants helps our clients/partners integrate technology that fits their business needs. We provide our clients with a full array of services, including: - Project Management & Oversight (PMP certified Project Managers) - Database and Data Management (Certified DBA’s) - Data Architecture (DAMA and TDWI member) - Middleware Support (Oracle Fusion Middleware) - Application Lifecycle Management (ALM) - Oracle Fusion Middleware Support - Business Intelligence Support (WebFOCUS, Business Objects, Tableau) - Full Lifecycle Application Development (Agile, RUP, Waterfall) - Identity Management - Operations and Maintenance Core Values: CSS was founded on a set of guiding principles that include good old fashioned hard work, ethics, teamwork, and innovation. We establish relationships with our customers that are based on direct and honest communication and perseverance to get the job done which in turn fosters respect and trust. We expect our associates, at every level, to conduct themselves with integrity, honesty and strong ethics in all relationships with customers and employees.
