System Database Developer - SecDevOps

* This position is contingent upon a future opening with Gunnison.

Salary: $130,000 - $145,000/year

Work location: Hybrid, 2-3 days per week on-site in Bethesda, MD.

• Design, develop, maintain, and secure enterprise applications, databases, automation workflows, and supporting infrastructure for NIH CIT systems and services.
• Implement Secure DevOps (SecDevOps) practices throughout the software-development lifecycle, integrating security requirements into planning, design, development, testing, deployment, operations, and maintenance.
• Develop and maintain CI/CD pipelines using tools such as Azure DevOps, Jenkins, GitLab CI/CD, GitHub Actions, AWS CodePipeline, or comparable platforms.
• Build, maintain, and enhance database solutions using technologies such as Microsoft SQL Server, Oracle, PostgreSQL, MySQL, MongoDB, or other enterprise database platforms.
• Develop database objects and code, including schemas, tables, views, stored procedures, functions, triggers, queries, scripts, and data-integration processes.
• Apply secure-coding standards and remediate findings from static application security testing (SAST), dynamic application security testing (DAST), software-composition analysis (SCA), container scanning, infrastructure-as-code scanning, and manual code review.
• Support secure application and database design, including authentication, authorization, privileged access, encryption, secrets management, secure APIs, data masking, logging, auditing, backup, recovery, and high availability.
• Identify, analyze, prioritize, and remediate application, database, cloud, container, operating-system, and infrastructure vulnerabilities in coordination with cybersecurity, system owners, and engineering teams.
• Implement and maintain infrastructure-as-code and configuration-management solutions using tools such as Terraform, Ansible, CloudFormation, ARM/Bicep, Chef, Puppet, or comparable technologies.
• Support containerized and cloud-native application environments using Docker, Kubernetes, OpenShift, AWS, Azure, Google Cloud Platform, or comparable technologies.
• Implement security monitoring, audit logging, and alerting for applications, databases, cloud services, and CI/CD pipelines; support integration with SIEM and vulnerability-management platforms.
• Ensure application, database, and DevOps activities comply with NIH, HHS, and federal cybersecurity requirements, including NIST RMF, NIST SP 800-53, secure development principles, configuration management, continuous monitoring, and vulnerability-management processes.
• Collaborate with developers, database administrators, cloud engineers, cybersecurity engineers, system owners, ISSOs, and program leadership to resolve technical issues and deliver secure solutions.
• Develop and maintain technical documentation, including system designs, data models, database design documents, deployment procedures, runbooks, configuration baselines, security documentation, and SOPs.
• Participate in code reviews, architecture reviews, release planning, sprint activities, change-control processes, incident-response support, disaster-recovery testing, and continuous-improvement initiatives.
• Produce technical status reports, vulnerability-remediation updates, operational metrics, and management briefings as required.