TSSCI Software Engineer

We’re hiring a mid-level Software Engineer with strong Python, Flask, and DevSecOps skills to build secure, reliable REST APIs for enterprise/government programs. This role owns features end-to-end, strengthens CI/CD with continuous security, and partners with product, security, and operations to deliver compliant, production-grade services.

Key Responsibilities:

• Design, develop, and maintain Flask-based REST APIs and backend services
• Implement secure data access layers and authentication/authorization (e.g., OAuth2/JWT)
• Build and improve CI/CD pipelines (automated builds, tests, deployments) with integrated security scanning
• Create and maintain automated tests (unit/integration/API) and maintain quality gates
• Containerize services (e.g., Docker) and support deployment/orchestration patterns as needed
• Use infrastructure-as-code (e.g., Terraform/Ansible) and configuration management best practices
• Integrate and act on security scanning (SAST/DAST/SCA); remediate findings and follow secure coding practices
• Implement secrets management using approved vault/secret managers; enforce least privilege
• Implement logging/metrics/monitoring; support alerting and dashboards
• Support incident response/on-call rotations, perform root-cause analysis, and contribute to postmortems
• Participate in Agile/Scrum ceremonies, code reviews, and engineering standards
• Produce and maintain documentation (API docs, designs, runbooks, compliance artifacts)

Basic Qualifications:

• 3–6 years of professional software engineering experience
• Strong proficiency in Python and Flask building secure RESTful APIs
• Solid understanding of security fundamentals (authN/authZ, OWASP Top 10 concepts, key/secret handling)
• Hands-on experience with Git, Linux, Docker, and CI/CD pipelines
• Proficiency with automated testing practices and frameworks
• Experience with databases and data modeling (SQL/ORM; e.g., PostgreSQL/MySQL)
• Familiarity with infrastructure-as-code and cloud services (AWS/Azure/GCP)
• Experience with logging/monitoring and operational best practices
• Strong communication skills and ability to collaborate with cross-functional teams
• Optional (if required by program): eligibility to obtain and maintain a U.S. government security clearance

Preferred Qualifications:

• Experience with Kubernetes/OpenShift
• Experience with Terraform/Ansible and secret managers (e.g., Vault or cloud-native equivalents)
• Familiarity with OAuth2/OIDC, SSO, and API gateway patterns
• Hands-on with SAST/DAST/SCA tooling and SBOM practices
• Performance tuning and scalability experience for Flask services