DevSecOps Platform & Governance Engineer

Employer: Brooksource | Client: Public-sector / State government engagement

Location: Nashville, TN area (hybrid) | Type: Contract, employer-of-record | Openings: 3

ROLE OVERVIEW

Brooksource is hiring for a public-sector technology modernisation effort that is standing up a shared set of software delivery tools and the security and governance practices that go with them. You will help introduce and administer these platforms across multiple departments, define how teams work within them, and build automated security scanning into the software delivery process. A steady focus throughout is doing this cost-effectively: consolidating tools, controlling licensing, and avoiding duplicated spend across agencies.

There are three openings. The client is comfortable with candidates who are deep in one of the focus areas below rather than expert in all of them. Read the focus areas, then apply to the one that best matches your strongest experience. Brooksource is the employer of record for these roles.

FOCUS AREAS (THREE OPENINGS)

1. Platform / DevOps Engineering (the builder)

You have hands-on experience standing up and administering software delivery platforms, not just using them. You configure and support the toolchain end to end so that development teams can plan work, store code, and ship software reliably.

2. Application Security Engineering (code scanning)

You specialise in automated code security. You integrate scanning tools into the delivery pipeline, tune them to cut false alarms, and help teams fix the vulnerabilities those tools find before software is released.

3. Governance & Process Lead (the rule-setter)

You define the standards, processes, and guardrails for how multiple departments work within shared tools, and you drive adoption across teams. You are comfortable in a public-sector environment with its procurement rules, cross-agency coordination, and need for documented, auditable process. Cost-effectiveness and tool consolidation decisions sit primarily with this role.

CORE RESPONSIBILITIES (SHARED ACROSS ALL THREE)

• Stand up the toolchain: Introduce, configure, and administer software delivery and collaboration tools including Jira, Azure DevOps, GitHub, and OpenShift.

• Build the governance: Define repeatable processes, guardrails, and documentation for how multiple departments plan, build, and release software within the shared platforms.

• Secure the pipeline: Integrate and maintain automated code security scanning within the delivery pipeline, review findings, and support teams in remediating them.

• Control the cost: Recommend and implement tool consolidation and licensing decisions that reduce duplicated spend while meeting security and delivery needs.

• Work across teams: Partner with engineering, security, and departmental stakeholders to drive adoption and keep the platforms aligned to agency requirements.

REQUIRED QUALIFICATIONS

• Hands-on experience administering or standing up at least one of the following platform areas: container platforms (OpenShift or Kubernetes), CI/CD pipelines (Azure DevOps, GitHub Actions, Jenkins, or similar), or code and work-tracking tooling (GitHub, Jira, Azure DevOps).

• Working knowledge of secure software delivery practices and how security fits into a development pipeline.

• Demonstrated ability to document processes and drive adoption across more than one team or department.

• Clear written and verbal communication with both technical and non-technical stakeholders.

• Eligibility to pass a public-sector background check.

PREFERRED QUALIFICATIONS (STRENGTH IN ONE FOCUS AREA)

• Platform focus: OpenShift administration in an enterprise or government environment.

• Application security focus: Experience with code scanning tools such as SonarQube, Snyk, Checkmarx, Veracode, Fortify, or GitHub Advanced Security, and familiarity with SAST, DAST, and SCA scanning approaches.

• Governance focus: Prior public-sector or State government experience, familiarity with NIST or similar frameworks, and a track record of building IT governance or SDLC standards.

• Cost focus: Experience managing software and cloud licensing costs (sometimes called FinOps).

ABOUT BROOKSOURCE

Brooksource is a technology talent and services partner. For these roles Brooksource is the employer of record, meaning you are employed and supported by Brooksource while delivering work on the client engagement. We place emerging and experienced technical talent into roles across the region and provide ongoing support throughout the assignment.

Pay: $60.00 - $70.00 per hour

Benefits:

• Dental insurance
• Health insurance
• Vision insurance

Work Location: Remote