Software Engineer SME DevSecOps & Artifact… at GCA · Location…

Benefits:

• 401(k) matching
• Competitive salary
• Dental insurance
• Health insurance
• Paid time off
• Parental leave
• Vision insurance

Description:

Overview

We are seeking a highly skilled Software Engineer Subject Matter Expert (SME) specializing in DevSecOps, artifact management, and secure software development to join our team supporting the Naval Criminal Investigative Service (NCIS) in Quantico, Virginia. The ideal candidate will possess extensive experience in secure software development practices, software artifact management, and application security across diverse development environments.

This position will support the migration of mission-critical applications to a secure software development toolchain while ensuring compliance with Department of the Navy Chief Information Officer (DON-CIO) policies and security requirements. The successful candidate will provide technical expertise, guidance, and hands-on support to software development teams to improve code quality, strengthen software supply chain security, and implement sustainable secure development practices.

This position offers a hybrid work schedule, with onsite support required approximately 1–2 days per week or as mission requirements dictate.

Duties

• Provide technical expertise and guidance in migrating mission applications to secure software development toolchains and environments.
• Implement and support DevSecOps practices throughout the software development lifecycle (SDLC), ensuring compliance with applicable Department of the Navy cybersecurity policies.
• Configure, maintain, and optimize software artifact management platforms such as Nexus, JFrog Artifactory, NuGet, or similar solutions.
• Support secure coding practices, application security standards, and software supply chain security initiatives.
• Implement and manage Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) capabilities using tools such as SonarQube, Aikido, CodeQL, or similar platforms.
• Support Software Bill of Materials (SBOM) development, dependency management, vulnerability identification, and remediation processes.
• Implement secure Git-based development workflows, including branch management rules, pre-commit hooks, and code quality controls.
• Provide technical guidance on Zero Trust principles and their application to software development environments.
• Evaluate application security and software engineering practices across relational and NoSQL databases, compiled and interpreted programming languages, and diverse operating systems.
• Collaborate with software developers, cybersecurity personnel, and technical teams to integrate security controls into development processes.
• Identify security weaknesses, code quality issues, and software development risks, recommending appropriate corrective actions.
• Provide mentorship and technical guidance to development teams to promote consistent adoption of secure software development standards and best practices.

Required Skills

• Active Top Secret clearance with SCI access.
• Minimum of 10 years of relevant technical experience with a high school diploma, or commensurate experience.
• Expert-level experience with secure software development and DevSecOps principles across full-stack application environments.
• Expertise with artifact management platforms such as Nexus, Artifactory, NuGet, or comparable technologies.
• Experience implementing and supporting SAST/DAST and code quality platforms such as SonarQube, Aikido, CodeQL, or similar tools.
• Strong knowledge of secure coding practices, software dependency management, software supply chain security, and SBOM requirements.
• Experience implementing Git-based development workflows, including branch protection policies, pre-commit hooks, and code management practices.
• Experience with relational and NoSQL databases and application development across compiled and interpreted programming languages.
• Understanding of Zero Trust principles and their application to secure software development.
• Ability to apply software engineering and security principles across multiple operating systems, programming languages, and hosting environments.
• Strong analytical, troubleshooting, and problem-solving skills.
• Ability to provide technical guidance and mentorship to software development teams.
• Must reside within commuting distance of Quantico, VA, and be available for onsite support as required.

Preferred Skills

• Experience supporting Department of Defense or Department of the Navy software development environments.
• Familiarity with DON-CIO secure software development policies.
• Experience supporting application modernization and migration to secure development toolchains.
• Experience establishing or improving enterprise DevSecOps processes and development security standards.
• Experience supporting software development initiatives within classified government environments.

Benefits

GCA is a Small Disadvantaged Veteran-Owned company supporting several government contracts. GCA is pleased to offer a competitive benefits package to all full-time employees. Below is a brief overview of our benefits package.

• Competitive Compensation
• Paid Time Off includes 10 federal holidays and 15 additional days
• Bereavement Leave
• Parental Leave
• PTO Cash Out
• Company-Paid Short-Term and Long-Term Disability (STD/LTD)
• Life and AD&D Insurance
• Medical, Prescription, Dental, and Vision Coverage
• 401(k) Savings Plan with Company Match
• Employee Referral Program

About GCA

At GCA, we stand at the forefront of innovation, lighting the way toward a future where technology serves as a beacon of possibility. As a premier provider of Information Technology and Audio-Visual Integration services, our mission is to empower individuals and organizations to navigate the digital landscape with confidence and clarity. We provide advanced information technology support services and Audio-Visual system solutions to government and commercial customers worldwide.

Flexible work from home options available.

Compensation: $191,000.00 per year

GCA is a minority veteran owned small business providing solutions to customer requirements in every realm of the intelligence and information technology industries to include, imagery/intelligence analysis, related systems engineering and administration, operations and maintenance, networking and VTC services.

GCA is committed to a safer tomorrow. The challenges facing our Nation and the World grow ever more complex and require the highest level of dedication, integrity, and service. These core values are the backbone GCA builds upon to provide our customers with exceptional service within the dynamic intelligence community and ever changing Information Technology sector.