DevSecOps Lead​/Chief Engineer

Are you looking for your next challenge? Are you ready to work with a performance-based small company? At Zantech, we are a dynamic Woman Owned Small Business focused on providing complex, mission-focused solutions with a proven track record of outstanding customer performance and high employee satisfaction. We would love to talk with you regarding the next step in your career. Come join our team!

Zantech is looking for a talented Dev Sec Ops  Lead / Chief Engineer to contribute to the success of our upcoming Applied and Emerging Technology Support project for a Hybrid role based out of Camp Springs, MD.

The Dev Sec Ops  Lead serves as the technical authority for all Dev Sec Ops  engineering activities across USCIS OIT portfolios, bridging gaps between programs with varying levels of Dev Sec Ops  maturity. This role requires a hands‑on technical leader who can design, implement, and optimize CI/CD pipelines, infrastructure automation, and containerized environments while ensuring compliance with✨ DHS Zero Trust principles.

The Dev Sec Ops  Lead will establish and disseminate best practices that accelerate secure, reliable digital transformation across the USCIS enterprise.

• Dev Sec Ops  Engineering & Architecture
  • Design and implement enterprise CI/CD pipelines with integrated security controls and automated gates
  • Architect cloud‑native solutions using containers, microservices, and serverless technologies
  • Develop infrastructure‑as‑code (IaC) templates and reusable deployment patterns
  • Implement continuous monitoring and observability solutions across applications and infrastructure
  • Guide migration from monolithic to decomposed, microservices‑based architectures
  • Establish reference implementations for high‑performing, scalable platform designs’ol induce-destyle>
• Security Integration
  • Integrate security scanning tools (SAST, DAST, SCA, container scanning) into CI/CD pipelines
  • Implement application and workload security controls aligned with Zero Trust architecture
  • Ensure compliance with DHS security requirements, FedRAMP, and FISMA standards
  • Automate security testing and vulnerability remediation workflows
  • Establish security gates and governance controls within deployment pipelines
  • Conduct threat modeling and security risk assessments for USCIS applications
• CI/CD Pipeline Optimization
  • Build and maintain CI/CD pipelines using tools such as Jenkins, Git Lab CI/CD, Git Hub Actions Anchor
  • Automate build, test, and deployment processes to enable Team Managed Deployment (TMD)
  • Reduce deployment cycle times while improving reliability and security
  • Implement blue‑green, canary, and rolling deployment strategies
  • Establish automated rollback mechanisms and disaster recovery procedures
  • Optimize pipeline performance and eines resource utilization
• Infrastructure & Platform Management
  • Manage containerized environments using Kubernetes, Docker, and Open Shift
  • Implement service mesh technologies for microservices communication
  • Design and maintain cloud infrastructure in AWS Gov Cloud
  • Automate environment provisioning and configuration management
  • Implement infrastructure monitoring, logging, and alerting solutions
  • Ensure high availability, scalability, and disaster recovery capabilities
• USCIS Enterprise Tool Integration
  • Maximize utilization of USCIS‑developed enterprise platforms:
    • USCIS Backstage:
      Developer portal integration and plugin development
    • Container Compliance Dashboard (CCD):
      Integrate pipeline reporting and compliance metrics
    • Enterprise Ready Deployment Services (ERDS):
      Standardize deployment orchestration
    • Common Microservices Initializer (CMI):
      Establish patterns for new service creation
  • Contribute enhancements and feedback to USCIS platform teams
  • Develop documentation and training materials for enterprise tool adoption
• Best Practices & Standards
  • Establish agency‑wide Dev Sec Ops  principles and guidelines supporting Agile practices
  • Promote Git Ops workflows and declarative configuration management
  • Implement trunk‑based development and feature flagging strategies
  • Standardize logging, monitoring, and observability practices
  • Reduce dependencies on proprietary software; promote open‑source…