DevSecOps Engineer (Full-Stack)

Overview

Bravo Communications Services LLC is leading the Identity Credential Access Management Next Gen Single Sign On (ICAM NG SSO) program for the Department of Veterans Affairs. This program aims to modernize the VA's Single Sign-On (SSO) technology to enhance security, user experience, and operational efficiency.

Position Overview

Were seeking a dynamic DevSecOps Engineer who brings full-stack development chops to the table. This role is perfect for someone who thrives at the intersection of secure infrastructure, CI/CD automation, and modern web application development. Youll be instrumental in designing, implementing, and securing scalable systems while contributing to both backend and frontend codebases.

Responsibilities

• Design and implement secure CI/CD pipelines using tools like GitHub Actions, Terraform, and container orchestration platforms (e.g., Kubernetes)
• Develop and maintain full-stack applications using React, TypeScript, C#, and ASP.NET Core
• Integrate security controls into infrastructure-as-code and application workflows
• Collaborate with product, engineering, and security teams to enforce secure coding practices and threat modeling
• Monitor and respond to vulnerabilities across cloud environments (Azure/AWS/GCP)
  
  

Required Experience/Qualifications

• 5 years in DevOps, SecOps, or related engineering roles
• Experience with infrastructure-as-code (Terraform)
• Proficiency in full-stack development: React TypeScript (frontend), C# ASP.NET Core (backend)
• Deep understanding of cloud security principles and secure software development lifecycle (SSDLC)
• Experience with containerization (Docker) and orchestration (Kubernetes)
• Familiarity with identity and access management (IAM), secrets management, and zero-trust architectures
  
  

Preferred Experience/Qualifications

• Certifications: Azure Security Engineer, AWS Certified DevOps Engineer, or similar
• Experience with Entra ID (Azure AD), GitHub Enterprise, and enterprise-grade RBAC models and Okta.
• Background in enterprise IT, compliance frameworks (SOC 2, ISO 27001), or regulated environments
  
  

Special Requirements/Security Clearance

• Ability to obtain and maintain a Public Trust
  
  

#J-18808-Ljbffr