> Markdown version of [/jobs/ext/1447591-devsecops-release-engineer-flosum](https://www.wearedevelopers.com/jobs/ext/1447591-devsecops-release-engineer-flosum). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# DevSecOps / Release Engineer (Flosum)

- **Company:** VivSoft Technologies
- **Location:** Herndon, VA, United States (Remote available)
- **Salary:** $125,000.0 - $145,000.0
- **Contract:** Permanent contract
- **Skills:** Application Lifecycle Management, Cloud Computing, CompTIA Security+, Cyber Security, Continuous Integration, DevOps, Metadata, Salesforce.Com, Security Information and Event Management, Apex Code, Git Flow, Information Technology, Low-code, Devsecops
- **Published:** July 26, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=20091e074377da3b

## About the Role

* Bachelor's degree in Cybersecurity, Computer Science, IT, or a related field
 * Demonstrated experience configuring Flosum or comparable low-code/no-code CI/CD tooling
 * Demonstrated DevSecOps practice in a DoD or federal environment: pipeline-as-code, security gate automation, ATO evidence generation
 * Proficiency with branching strategies, metadata conflict resolution, and multi-team deployment coordination
 * CompTIA Security+, * Master's degree in Cybersecurity or Information Assurance
 * Experience deploying on Salesforce Government Cloud or comparable IL-4/IL-5 cloud environment
 * Salesforce Certified DevOps Engineer or Application Lifecycle Management credential
 * Flosum Certified Professional or Flosum Expert
 * CISSP, CISM, or similar

## Description

The DevSecOps / Release Engineer is a critical role for the ARES production development activity, reflecting the increased pipeline complexity of concurrent development teams delivering into a Salesforce Government Cloud environment. This role owns the Flosum CI/CD pipeline configuration for one or more development teams, generates and maintains the ATO evidence chain for continuous monitoring, and performs the hands-on security validation engineering. Additionally, this role is responsible for working with Government stakeholders to implement pipeline automation and quality gates., * Configure and maintain the Flosum CI/CD pipeline for one or more concurrent development teams: branching strategy, gate thresholds, and merge conflict resolution

 * Generate and maintain ATO evidence artifacts for continuous monitoring (e.g. deployment logs, PMD scan outputs, Apex coverage reports, Security Health Check screenshots on a sprint cadence)
 * Investigate and resolve pipeline gate failures within the same sprint they occur, and brief the PM and Solution Architect on chronic failures triggering the escalation protocol
 * Perform IL-4/5 security validation engineering (e.g. encryption configuration verification, SIEM event forwarding setup, Event Monitoring rule configuration, and ICAM federation testing)
 * Manage the multi-environment Flosum configuration (development, integration, promoted sandbox)


## Related Videos

- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)
- [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform)
- [A Data Mesh needs Open Metadata](https://www.wearedevelopers.com/videos/505-a-data-mesh-needs-open-metadata)
- [Git for Code Reviews](https://www.wearedevelopers.com/videos/429-git-for-code-reviews)
- [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops)
- [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment)

## Related Articles

- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Dev Digest 162: AI careers, MCP, AWS best practices & floppy sweaters](https://www.wearedevelopers.com/magazine/571-dev-digest-162-ai-careers-mcp-aws-best-practices-floppy-sweaters)
- [Now is the time for industrialized software development](https://www.wearedevelopers.com/magazine/601-now-is-the-time-for-industrialized-software-development)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)