
location_onEggplant Alley, Alkali Flat, Sacramento, Sacramento County, California, 95814, United States
As a DevSecOps Engineer within Maximus TCS, you will serve as a critical bridge between development, security, and operations. This role is designed to fortify our security posture while accelerating deployment pipelines through automation. You will operate in a high-stakes environment where maintaining the integrity of network infrastructure and application security is paramount.
Your day-to-day involves orchestrating incident response, managing vulnerability lifecycles, and conducting rigorous penetration testing. You will not only identify security gaps but also engineer the automated frameworks and scripts necessary to remediate them. From designing secure deployment processes to maintaining the runbooks that prevent recurring issues, you will ensure that our security operations are both robust and efficient.
This position requires a deep understanding of cloud site reliability engineering and the ability to translate complex security requirements into actionable technical solutions. You will collaborate closely with cross-functional teams to implement automated security testing tools and manage access controls, ensuring that our systems remain resilient against evolving threats.
Candidates selected for this role will undergo a comprehensive evaluation process designed to assess both technical expertise and cultural fit. The process typically includes:
To apply, please submit your resume and relevant certifications through the official Maximus careers portal. If you require assistance during any phase of the employment process due to a disability, medical condition, or other impairment, please contact People Operations at applicantaccom@maximus.com to request reasonable accommodations.
Maximus is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, age, national origin, disability, veteran status, genetic information, or other legally protected characteristics. We are committed to fostering a diverse and inclusive workplace where all employees can thrive.
Maximus offers a competitive total compensation package. While the specific salary range for this role is commensurate with job duties and relevant work experience, our rewards extend beyond base pay to include short- and long-term incentives, program-specific awards, health insurance coverage, life and disability insurance, a retirement savings plan, and paid time off. We believe in transparent compensation practices and do not use an applicant's salary history to determine pay.
Work model: On-site
Eggplant Alley, Alkali Flat, Sacramento, Sacramento County, California, 95814, United States
Sacramento, California
Certified Kubernetes Application Developer (CKAD), Red Hat Certified Engineer (RHCE), Certified Jenkins Engineer (CJE), AWS Certified DevOps Engineer, Certified Kubernetes Engineer (CKA), GitLab Certified DevOps Professional, or similar certifications. Familiarity with technical aspects for IT and IAT-Level II Certifications. Experience with CI/CD pipelines, infrastructure as code, and containerization technologies. Expertise in cloud platforms, automation tools, scripting languages, and security testing tools. Understanding of AWS, Azure, or GCP and their security services. Understanding of USAF IT systems, networks, and platforms. Experience with Jenkins, GitLab CI, Azure DevOps, or similar tools for automating the build, test, and deployment process. Proficiency with tools like Terraform, Ansible, or CloudFormation to automate infrastructure provisioning and configuration. Familiarity with Docker, Kubernetes, and related technologies. Proficiency in scripting languages like Python, Bash, or PowerShell to automate security tasks and workflows. Experience with static analysis (SAST), dynamic analysis (DAST), and software composition analysis (SCA) tools, as well as vulnerability scanners. Solid understanding of network security principles, including firewalls, intrusion detection/prevention systems, and network segmentation. Familiarity with SIEM solutions (like Splunk or ELK) and log aggregation tools for security monitoring. Familiarity with Identity and Access Management (IAM) and Zero Trust (ZT) security models.