DevSecOps / Release Engineer (Flosum) at VivSoft Technologies
Herndon, VA
$125,000–$145,000
Jul 22, 2026
Herndon, VA
Jul 24, 2026
What this job asks for AI summary
This role centers on owning the Flosum CI/CD pipeline for concurrent development teams delivering into a Salesforce Government Cloud environment, including branching strategy, gate configuration, and merge conflict resolution. The engineer also generates and maintains ATO evidence artifacts for continuous monitoring and carries out hands-on IL-4/5 security validation tasks such as encryption verification and SIEM event forwarding. It suits candidates with federal or DoD DevSecOps experience and familiarity with low-code/no-code CI/CD tooling.
Mid level · Remote · Bachelor's required · Secret clearance · Full-time
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Rare in this occupation — lead with these, and say what you built with them.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $138,970 (middle half $107,524–$175,762).
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (9)
The clearance requirement is stated as 'Public Trust OR Secret' — the role gates on one of the two; Secret is the higher bar and is captured here, but a Public Trust may suffice.
SOC classification is a genuine judgment call: the role primarily BUILDS and owns a CI/CD pipeline (pointing to 15-1252 Software Developers), but a substantial portion of the day-to-day work is IL-4/5 security validation engineering and ATO evidence generation (pointing to 15-1212 Information Security Analysts). Software Developers was chosen as primary because pipeline configuration and release engineering are the headline responsibilities.
Flosum is listed as required with 'or comparable low-code/no-code CI/CD tooling' — alternatives populated with the closest Salesforce-ecosystem CI/CD peers (Copado, Gearset, AutoRABIT).
ATO evidence generation is listed as a required practice (not a named tool), but it is a concrete, specialized federal compliance deliverable distinct from generic DevSecOps; retained as a required skill.
CompTIA Security+ is listed under Required Skills & Experience and is treated as a hard gate.
PMD (static analysis scanner referenced in the ATO evidence artifacts description) and SIEM (referenced in the IL-4/5 security validation duties) appear in the responsibilities narrative rather than a requirements section and are marked preferred.
No compensation figures were provided in the posting.
No total years of experience requirement was stated.
Requires a Secret clearance — the cleared population is a small fraction of this occupation, so the real candidate pool is materially smaller than the estimate below, which does not model clearance.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.