Skip To Job Description

VivSoft Technologies

Thanks for visiting our Career Page. Please review our open positions and apply to the positions that match your qualifications.

DevSecOps / Release Engineer (Flosum)

Herndon, VA

Full Time

USAF

Mid Level

Share

Job Title: Release Engineer
Location: Remote
Clearance: Public Trust OR Secret
Type: Full-time, W2

About VivSoft:
VivSoft is a mission-driven technology company specializing in Cloud, DevSecOps, Artificial Intelligence, and Digital Experience. We are a diverse team of innovators focused on creating open, scalable, and automated solutions that drive digital transformation in federal space. Our work culture fosters collaboration, creativity, and continuous learning.

Job Summary:
The DevSecOps / Release Engineer is a critical role for the ARES production development activity, reflecting the increased pipeline complexity of concurrent development teams delivering into a Salesforce Government Cloud environment. This role owns the Flosum CI/CD pipeline configuration for one or more development teams, generates and maintains the ATO evidence chain for continuous monitoring, and performs the hands-on security validation engineering. Additionally, this role is responsible for working with Government stakeholders to implement pipeline automation and quality gates.

Key Responsibilities:

• Configure and maintain the Flosum CI/CD pipeline for one or more concurrent development teams: branching strategy, gate thresholds, and merge conflict resolution
• Generate and maintain ATO evidence artifacts for continuous monitoring (e.g. deployment logs, PMD scan outputs, Apex coverage reports, Security Health Check screenshots on a sprint cadence)
• Investigate and resolve pipeline gate failures within the same sprint they occur, and brief the PM and Solution Architect on chronic failures triggering the escalation protocol
• Perform IL-4/5 security validation engineering (e.g. encryption configuration verification, SIEM event forwarding setup, Event Monitoring rule configuration, and ICAM federation testing)
• Manage the multi-environment Flosum configuration (development, integration, promoted sandbox)

Required Skills & Experience:

• Bachelor's degree in Cybersecurity, Computer Science, IT, or a related field
• Demonstrated experience configuring Flosum or comparable low-code/no-code CI/CD tooling
• Demonstrated DevSecOps practice in a DoD or federal environment: pipeline-as-code, security gate automation, ATO evidence generation
• Proficiency with branching strategies, metadata conflict resolution, and multi-team deployment coordination
• CompTIA Security+

Preferred Qualifications:

• Master's degree in Cybersecurity or Information Assurance
• Experience deploying on Salesforce Government Cloud or comparable IL-4/IL-5 cloud environment
• Salesforce Certified DevOps Engineer or Application Lifecycle Management credential
• Flosum Certified Professional or Flosum Expert
• CISSP, CISM, or similar

Benefits:  

• Comprehensive Medical, Dental, and Vision Plans (Healthcare benefits are 100% employer-paid for employees only)  
• Life Insurance  
• Paid Time Off (Flexible/Combined PTO, Bereavement Leave, 11 Company Paid Holidays)  
• 401K Retirement Plan with employer match  
• Professional Development Training Reimbursement 

Salary Range: $125,000-$145,000 annually

Share Apply

Apply for this position

Required*

// GTM Values For A/B Testing var EXP1_TWO_STAGE_APPLY_ENABLED = false; var EXP1_TWO_STAGE_APPLY_CHOSEN = false; window.resumeRequired = true;

First Name*

Last Name*

Email Address*

Phone*

Address

Resume*

We've received your resume. Click here to update it.

Attach resume or Paste resume

Attach resume as .pdf, .doc, .docx, .odt, .txt, or .rtf (limit 5MB) or Paste resume

Paste your resume here or Attach resume file

Human Check*

Submit Application

// Define Google Tag Manager script function runGoogleTagManagerScript() const gtmScript = document.createElement(script); gtmScript.async = true; gtmScript.src = https://www.googletagmanager.com/gtm.jsid=GTM-H9NR; const firstScript = document.getElementsByTagName(script)[0]; firstScript.parentNode.insertBefore(gtmScript,firstScript); // Set tracking consent to denied by default window.dataLayer = window.dataLayer || []; function gtag() dataLayer.push(arguments); gtag(consent, default, ad_user_data: denied, ad_personalization: denied, ad_storage: denied, analytics_storage: denied, wait_for_update: 500, ); dataLayer.push(gtm.start: new Date().getTime(), event: gtm.js); window.googleTagManager = window.dataLayer; // If consent has already been granted, load Google Tag Manager if (localStorage.getItem(trackingConsentGranted) === true) runGoogleTagManagerScript(); function grantConsent() // Store tracking consent preference and push update to Google Tag Manager localStorage.setItem(trackingConsentGranted, true); function gtag() googleTagManager.push(arguments); gtag(consent, update, ad_user_data: granted, ad_personalization: granted, ad_storage: granted, analytics_storage: granted ); // Load Google Tag Manager runGoogleTagManagerScript(); function denyConsent() // Store tracking consent preference and do not load Google Tag Manager localStorage.setItem(trackingConsentGranted, false); $([data-track-share-click]).click(function () googleTagManager.push( event: gaEvent, eventCategory: Share Job, eventAction: Click, eventLabel: $(this).data(track-share-click) + Share ); ); function initializeGainsightPX() // Get current page URL var currentURL = window.location.href; // Check if URL contains /apply/confirm/ if (currentURL.includes(/apply/confirm/)) return; // Exit function, do not proceed with initialization // Check to see if user id exists in sample population loading Gainsight PX var sessionID = 06c3d1f440efd97c0b915ed0d306577b; var visitorType = guest; var samplePercentage = 1; var accountId = customer_20250227180513_WA4Q1FWFMM56GWG2; var accountName = vivsofttechnologiesfa; // Format signUpDate as YYYY/MM/DD const today = new Date(); const signUpDate = today.getFullYear() + / + String(today.getMonth() + 1).padStart(2, 0) + / + String(today.getDate()).padStart(2, 0); if (visitorType !== guest || __IdSampler.isIdInSamplePopulation(sessionID, samplePercentage)) // Load Gainsight Script (function (n, t, a, e) let i = aptrinsic; n[i] = n[i] || function () (n[i].q = n[i].q || []).push(arguments); ; n[i].p = e; let r = t.createElement(script); r.async = true; r.src = a + a= + e; let c = t.getElementsByTagName(script)[0]; c.parentNode.insertBefore(r, c); )(window, document, https://web-sdk.aptrinsic.com/api/aptrinsic.js, AP-D0FHNVQROUMO-2); // Send custom attributes including Account ID and Account Name aptrinsic(identify, id: sessionID, role: Visitor, signUpDate: signUpDate , id: accountId, name: accountName ); // Initialize Gainsight PX if the URL condition is met initializeGainsightPX(); window.NREUM||(NREUM=);NREUM.info=beacon:bam.nr-data.net,licenseKey:7232591015,applicationID:29127175,transactionName:ZAcBYxEEXxICBkVRDV1NIEIQEV4MTARBSA5KTRNYEAxFCAwL,queueTime:0,applicationTime:155,atts:SEAWFVkeTE1BBBMCGU4f,errorBeacon:bam.nr-data.net,agent:'