Python/DevSecOps SME/Engineer

Overview of the Role:

The Senior SME - DevSecOps / Python Engineer provides senior technical leadership and hands-on engineering for secure software delivery, Python automation, cloud infrastructure, and CI/CD within a federal enterprise environment. The role establishes secure delivery standards, builds reusable automation and services, and integrates security throughout the software development lifecycle.

Essential Duties & Responsibilities:

• Design, implement, and optimize Git-based CI/CD pipelines for Python and platform workloads using GitLab CI, GitHub Actions, or equivalent tools.
• Integrate SAST, DAST, SCA, secrets scanning, container scanning, SBOM generation, artifact signing, and security gates into delivery pipelines.
• Develop production-grade Python automation, APIs, services, and operational tooling using Python, FastAPI/Flask, REST, and scripting frameworks.
• Automate infrastructure and environment provisioning using Terraform, policy-as-code, GitOps, and configuration-as-code practices.
• Build and secure Docker/container deployment patterns using Kubernetes/ECS and integrate AWS IAM, networking, secrets, encryption, and logging controls.
• Lead secure design reviews, vulnerability remediation, production troubleshooting, incident root-cause analysis, technical mentoring, and continuous improvement.

Qualifications:

• Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, Cloud Computing, or a related technical field.
• 10 years of software engineering, DevSecOps, cloud, platform, or security engineering experience, including senior technical leadership responsibilities.
• Expert Python development skills, including FastAPI/Flask, REST APIs, automation, testing, packaging, logging, and secure coding practices.
• Strong CI/CD, Git, Terraform, Docker, Kubernetes/ECS, AWS, and automated security testing experience.
• Knowledge of OWASP, IAM/RBAC, Zero Trust, secrets management, encryption/TLS, observability, vulnerability management, and software supply-chain security.
• Experience supporting federal or regulated environments and familiarity with FISMA, NIST 800-53, FedRAMP, ATO, and continuous monitoring.
• Preferred certifications include AWS, CISSP/Security , CKA/CKS, Terraform, Python, or comparable DevSecOps credentials.