Asks for

The ad says“One current certification: IAT III, IAM III, or IASAE III ( CISSP preferred)”
The ad says“One current certification: IAT III, IAM III, or IASAE III ( CISSP preferred)”
The ad says“One current certification: IAT III, IAM III, or IASAE III ( CISSP preferred)”
The ad says“Secure CI/CD pipeline engineering with in-pipeline security gates; integrating SIEM/scanners/ticketing into automated workflows; infrastructure-as-code and configuration management at scale; and data-normalization/schema work across disagreeing tools.”
The ad says“Secure CI/CD pipeline engineering with in-pipeline security gates; integrating SIEM/scanners/ticketing into automated workflows; infrastructure-as-code and configuration management at scale; and data-normalization/schema work across disagreeing tools.”
The ad says“Secure CI/CD pipeline engineering with in-pipeline security gates; integrating SIEM/scanners/ticketing into automated workflows; infrastructure-as-code and configuration management at scale; and data-normalization/schema work across disagreeing tools.”
The ad says“Secure CI/CD pipeline engineering with in-pipeline security gates; integrating SIEM/scanners/ticketing into automated workflows; infrastructure-as-code and configuration management at scale; and data-normalization/schema work across disagreeing tools.”
The ad says“Secure CI/CD pipeline engineering with in-pipeline security gates; integrating SIEM/scanners/ticketing into automated workflows; infrastructure-as-code and configuration management at scale; and data-normalization/schema work across disagreeing tools.”
The ad says“Secure CI/CD pipeline engineering with in-pipeline security gates; integrating SIEM/scanners/ticketing into automated workflows; infrastructure-as-code and configuration management at scale; and data-normalization/schema work across disagreeing tools.”
The ad says“Secure CI/CD pipeline engineering with in-pipeline security gates; integrating SIEM/scanners/ticketing into automated workflows; infrastructure-as-code and configuration management at scale; and data-normalization/schema work across disagreeing tools.”
The ad says“Secure CI/CD pipeline engineering with in-pipeline security gates; integrating SIEM/scanners/ticketing into automated workflows; infrastructure-as-code and configuration management at scale; and data-normalization/schema work across disagreeing tools.”

Custom Software Systems, Inc. (CSS) is seeking a DevSecOps Engineer to support our clients' enterprise cybersecurity engineering program. You'll own the secure CI/CD lifecycle and the integration work that wires their cybersecurity tooling into a working, automated pipeline — building the automation, workflow libraries, and telemetry standards that let security scale without adding manual effort. This is hands-on engineering with enterprise scope and a heavy automation-and-integration focus.

Responsibilities

Engineer secure CI/CD pipelines with security gates enforced in the pipeline, and integrate disparate security tooling (SIEM, scanners, ticketing) into automated, orchestrated workflows.
Build and maintain the automation backbone: a version-controlled workflow/SOAR library, engineering runbooks and playbooks, and data-normalization and labeling standards across tools that don't natively agree.
Harden and manage enterprise baseline configurations using infrastructure-as-code and configuration management at scale, with change control that survives an audit.
Produce the recurring engineering deliverables this role owns — integration and schema documentation, monthly tool-optimization reporting, and audit-remediation and requirements-traceability artifacts.
Support continuous security validation, vulnerability management, and incident response across cloud-native and hybrid environments.

Citizenship

· US Citizenship

Required Qualifications

Minimum of ten (10) years of DevSecOps experience
At least five (5) of those ten (10) years in cybersecurity and cloud security at a large government agency comparable in size and scope to VA, DoD, IRS, or GSA.
Secure CI/CD pipeline engineering with in-pipeline security gates; integrating SIEM/scanners/ticketing into automated workflows; infrastructure-as-code and configuration management at scale; and data-normalization/schema work across disagreeing tools.
S.-based; able to obtain and maintain the VA Tier 4 / High Risk Public Trust and PIV.

Certifications

One current certification: IAT III, IAM III, or IASAE III ( CISSP preferred)

Preferred Qualifications

Federal DevSecOps experience.
Container and Kubernetes security.
Experience retiring redundant tooling,

Compensation & Benefits[1][2]

Wage Range: Negotiable
General Benefits: Custom Software Systems, Inc. offers our employees a competitive benefits package that may include:

Health insurance plans
Health Savings Account (HSA)
Dental
Vision
Long-term disability
Short-term disability
Basic term life insurance
Supplemental term life insurance for employees, spouses, and dependents
Simple IRA
Parking/Commuting expense reimbursement
Training/Education

[1] Compensation range must be coordinated with and approved by the CSS Chief Operating Officer (COO).

[2] Compensation & Benefits information is required for all Maryland Employers effective October 1, 2024.

Asks for

Values