DevSecOps Engineer II

Job summary

The DevSecOps Engineer II secures the development, testing, deployment, and operation of DocuSign integrations and supporting infrastructure for a federal cybersecurity environment. The role builds security controls into CI/CD pipelines, automates SAST, DAST, and software composition analysis, implements Infrastructure as Code, and develops integrations with Microsoft 365 and enterprise identity systems. It also supports federal security and Section 508 requirements, testing and documentation, and NARA-compliant records handling.

Benefits

Qualifications

• 3–5 years of related DevSecOps, software engineering, infrastructure automation, or security engineering experience.
• Bachelor’s degree in a relevant field.
• Proficiency with CI/CD tools such as Jenkins, GitLab, or Azure DevOps.
• Experience with security testing, vulnerability scanning, and penetration testing frameworks.
• Programming or scripting experience in one or more listed languages.
• Knowledge of security principles, encryption, authentication, authorization, network security, and secure credential handling.
• Experience with APIs, connectors, webhooks, SaaS integrations, and Microsoft 365 or enterprise identity platforms; DocuSign experience preferred.
• Experience supporting lifecycle testing, technical documentation, Federal security requirements, and Section 508 compliance.
• Ability to work independently and collaborate on moderately complex project activities.
• U.S. citizenship and authorization to work in the United States.
• Ability to obtain and maintain a favorable DHS/CISA Entry on Duty or fitness determination and complete the required background investigation.

Responsibilities

• Integrate security practices across development, testing, deployment, and operation of DocuSign integrations and supporting infrastructure.
• Design and maintain CI/CD security controls and automate SAST, DAST, software composition analysis, and other security checks.
• Conduct security assessments, vulnerability scans, and authorized penetration tests; prioritize findings and coordinate remediation.
• Implement Infrastructure as Code, automated testing, and controlled release and rollback procedures.
• Configure and maintain DocuSign accounts, templates, routing rules, policies, alerts, and administrative settings.
• Build and maintain plugins, connectors, and custom APIs integrating DocuSign with Microsoft 365, identity systems, and contract or case platforms.
• Implement encryption, access controls, network protections, and secure credential handling; monitor logs and escalate threats.
• Maintain security policies and procedures aligned with Federal, DHS, and CISA requirements.
• Execute tests and document defects, findings, remediation, results, and deployment readiness.
• Automate document conversion and records capture while preserving NARA-compliant formats, metadata, and disposition requirements.
• Document configurations, deployment procedures, integration architecture, and exception handling; support releases and knowledge transfer.
• Recommend and implement approved improvements to pipeline security, automation, and threat monitoring.

Skills

Certifications

Degrees

Work schedule

Industry

Security clearance

Relocation