DevSecOps Engineer

PhoenixTeam
DevSecOps Engineer
About Phoenix Team

Phoenix Team delivers technology, cybersecurity, and program management solutions to federal agencies, including the Department of Veterans Affairs. We are seeking a DevSecOps Engineer to support a project with the VA.
Position Summary

The DevSecOps Engineer will support an initiative that connects Salesforce, S-Docs, AWS, and VA Notify to deliver reliable, high-volume outbound Veteran communications — including case correspondence, notifications, and generated documents. The role spans solution assessment, hands-on development, and DevSecOps delivery: evaluating whether the proposed architecture can meet high-volume email and notification requirements, then building, testing, and deploying the integration components that make it work in production.
Key Responsibilities
Solution Assessment & Architecture

- Assess the end-to-end communication workflow across Salesforce, S-Docs, AWS, and VA Notify

- Evaluate S-Docs' ability to generate accurate, consistent HTML/PDF templates, and identify data dependencies, automation triggers, and governance controls needed to maintain template quality at scale.

- Examine AWS Lambda's processing capacity, queueing strategies (e.g., SQS, dead-letter queues), and monitoring capabilities

- Validate the overall solution against operational expectations for scalability, security controls, auditability, observability, and enterprise compliance alignment.

- Document findings, architectural decisions, and identified risks/issues to support traceability and future governance reviews.

- Produce formal solution documentation — data flow diagrams, sequence diagrams, design considerations, and decision logs — to align technical teams, business stakeholders, and support groups.

Development & Integration

- Build and refine Salesforce data models, integration components, error-handling logic, and orchestration needed to support end-to-end processing

- Implement AWS components such as API Gateway endpoints, Lambda functions, SQS queueing, dead-letter queues (DLQs), logging/monitoring pipelines, and services that write delivery results back into Salesforce.

- Automate configuration management, secrets management, and access controls across the integration layer in accordance with federal security baselines and least-privilege principles.

- Integrate application security scanning (SAST/DAST/SCA) into CI/CD pipelines supporting this and other integration workstreams.

Required Qualifications

- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field, or equivalent professional experience.

- Experience in DevOps/DevSecOps or software integration engineering roles, ideally supporting federal government or VA programs.

- Hands-on Salesforce development experience, including Apex, Flow/Process Builder, Lightning Web Components, and REST/SOAP or Bulk API integration patterns.

- Experience with a Salesforce document-generation/templating tool (e.g., S-Docs, Conga, or similar), including HTML/PDF template design, data dependencies, and automation triggers.

- Experience building serverless AWS integrations, including API Gateway, Lambda, SQS/DLQ patterns, and CloudWatch-based monitoring and alerting.

- Experience designing or supporting high-volume, fault-tolerant integration pipelines (e.g., outbound email/notification systems), with attention to throughput, API limits, and latency.

- Practical experience integrating automated security testing (SAST, DAST, SCA) into build and release pipelines.

- Working knowledge of NIST SP 800-53, the Risk Management Framework (RMF), FISMA, and the federal Assessment & Authorization / ATO process.

- Experience with automated testing practices, including high-volume/load testing (50,000+ transactions) and regression test automation.

- Experience deploying through CI/CD pipelines across multiple environments (dev, QA, UAT, production), including tools such as GitLab CI, J