By Light Professional IT Services LLC

Compensation

Full Description

Company Overview Bravo Communications Services LLC is leading the Identity Credential Access Management Next Gen Single Sign On (ICAM NG SSO) program for the Department of Veterans Affairs. This program aims to modernize the VA's Single Sign-On (SSO) technology to enhance security, user experience, and operational efficiency. Position Overview We’re seeking a dynamic DevSecOps Engineer who brings full-stack development chops to the table. This role is perfect for someone who thrives at the intersection of secure infrastructure, CI/CD automation, and modern web application development. You’ll be instrumental in designing, implementing, and securing scalable systems while contributing to both backend and frontend codebases. Responsibilities Design and implement secure CI/CD pipelines using tools like GitHub Actions, Terraform, and container orchestration platforms (e.g., Kubernetes) Develop and maintain full-stack applications using React, TypeScript, C#, and ASP.NET Core Integrate security controls into infrastructure-as-code and application workflows Collaborate with product, engineering, and security teams to enforce secure coding practices and threat modeling Monitor and respond to vulnerabilities across cloud environments (Azure/AWS/GCP) Required Experience/Qualifications 5+ years in DevOps, SecOps, or related engineering roles Experience with infrastructure-as-code (Terraform) Proficiency in full-stack development: React + TypeScript (frontend), C# + ASP.NET Core (backend) Deep understanding of cloud security principles and secure software development lifecycle (SSDLC) Experience with containerization (Docker) and orchestration (Kubernetes) Familiarity with identity and access management (IAM), secrets management, and zero-trust architectures Preferred Experience/Qualifications Certifications: Azure Security Engineer, AWS Certified DevOps Engineer, or similar Experience with Entra ID (Azure AD), GitHub Enterprise, and enterprise-grade RBAC models and Okta. Background in enterprise IT, compliance frameworks (SOC 2, ISO 27001), or regulated environments Special Requirements/Security Clearance Ability to obtain and maintain a Public Trust