DevSecOps Engineer, Senior - ASM Research, An Accenture Federal Services Company - Harrisburg, PA
ASM Research, An Accenture Federal Services Company
**Position Overview**
The DevSecOps Engineer, Senior provides engineering leadership to design and operate secure, automated delivery pipelines for cloud‑hosted and on‑premises applications. This role builds and maintains CI/CD workflows, infrastructure‑as‑code patterns, and integrated security controls that embed testing, scanning, and policy enforcement throughout the software lifecycle. The position partners closely with development, security, and operations teams to standardize toolchains and environments that support an "as‑a‑Service" delivery model, continuously refining automation, observability, and resilience practices to improve speed, quality, and compliance for mission‑critical services.
**Key Responsibilities**
+ Design, implement, and maintain CI/CD pipelines that automate build, test, security scanning, and deployment activities across multiple environments.
+ Develop and manage infrastructure‑as‑code templates and configuration‑management scripts to provision cloud and on‑premises environments in a consistent, repeatable manner.
+ Integrate security tooling and practices-such as static and dynamic application security testing, dependency scanning, and policy‑as‑code-directly into DevOps workflows.
+ Collaborate with development and platform teams to standardize containerization, orchestration, and environment configurations that support microservices and modern application architectures.
+ Implement automation and monitoring for platform health, observability, and incident response, using metrics and logs to drive reliability and performance improvements.
+ Support auto‑provisioning of infrastructure hardware, storage, and networks as part of an "as‑a‑Service" model, aligning solutions with cost, scalability, and operational objectives.
+ Define and document DevSecOps standards, patterns, and best practices, mentoring engineers on Agile and DevSecOps methodologies and toolchains.
+ Partner with stakeholders to evaluate new DevSecOps capabilities, ass