About this role
Job Description
Applies expert knowledge of the IT application management process to the support of a specific AAFES business function. The tasks associated with this support include, but are not limited to, reviewing, analyzing, and modifying programming systems including encoding, testing, debugging to support an AAFES business functions application systems. Creates detailed program specifications for application developers. Responsible for ensuring the application systems are in compliance to security, audit policies, and procedures. Monitors the performance of the application system.
Develops and maintains standard operating procedures and documentation, may write documentation to describe program development, logic, coding, and corrections. Provides project leadership for the planning and execution of major projects for the application system, consults with users to identify current operating procedures and to clarify program objectives. Ensures data integrity by evaluating, implementing, and managing appropriate software and hardware solutions for the application systems. Defines disaster recovery requirements and plans and delivers a disaster recovery solution for the applications systems.
Serves as third level support for user problems, resolving complex problems. Coordinates with business units, the project management office (PMO), outside entities and IT staff to confirm compliance and risk mitigation has been met. Responds to telephone calls and email requests for application systems support. Safeguards physical access to Exchange restricted data, processes and services.
Job Qualifications
Five years of experience in computer system design and computer programming using the applicable computer languages
Or
Complete IT professional certification or training program in programming/development in computer science.
Or
Bachelor's degree in information technology and three years of experience in computer system design and computer programming using the applicable computer languages.
Additional Qualifications/Requirements
Work – Onsite (HQ – Dallas, Texas)
- Remote/Telework not authorized per Presidential Memorandum “Return to In Person Work”
- PCS Not Authorized/LSP Not Authorized
ADDITIONAL QUALIFICATIONS
- Bachelor’s degree in Computer Science, Information Systems,
- Cybersecurity, or a related field; equivalent professional experience may be considered.
- Five or more years of experience in DevSecOps, DevOps, platform engineering, infrastructure engineering, application security, or a related discipline.
- Demonstrated experience designing, operating, securing, and improving enterprise software delivery platforms and supporting infrastructure.
- Hands-on experience administering enterprise CI/CD platforms, such as GitLab and Jenkins, including pipeline development, build agents, access controls, integrations, and upgrades.
- Experience integrating security testing into CI/CD pipelines, including static application security testing (SAST), software composition analysis (SCA), secret detection, and container image scanning.
- Experience assessing security findings, prioritizing vulnerabilities based on risk, and coordinating remediation with development, infrastructure, and security teams.
- Strong Linux system administration and troubleshooting skills, including networking, TLS certificates, permissions, and service management.
- Hands-on experience with container technologies and Kubernetes administration, including deployment, troubleshooting, access controls, and platform security.
- Proficiency in Python, Bash, or another scripting language for automation, API integrations, and operational tooling.
- Experience with Infrastructure as Code (IaC) and configuration automation using tools such as Terraform, CloudFormation, or Ansible.
- Experience implementing least-privilege access, secrets management, and credential rotation across delivery platforms and automation workflows.
- Experience managing platform upgrades, security patching, monitoring, backups, recovery procedures, and production changes.
- Demonstrated ability to independently lead technical initiatives, evaluate architectural trade-offs, establish engineering standards, and mentor team members.
- Strong communication and documentation skills, with the ability to explain technical issues, risks, and recommendations to technical and nontechnical stakeholders.
Preferred Qualifications
- Hands-on experience with AWS cloud services, particularly IAM, VPC, EC2, S3, EKS, CloudWatch, and Secrets Manager.
- Experience with enterprise security and software delivery tools such as SonarQube, Fortify, JFrog Artifactory, or UrbanCode Deploy.
- Experience administering or supporting Atlassian products, including Jira and Confluence.
- Experience with software supply-chain security, including software bills of materials (SBOMs), dependency governance, artifact integrity, and repository management.
- Experience working in regulated environments, implementing security controls, and supporting audits and compliance evidence collection.
- Experience designing highly available platforms and validating disaster recovery procedures.
- Relevant AWS, Kubernetes, Linux, or security certifications.
Major Duties
Analyze and design solutions, develop program specifications, prepare work estimates.
Interpret program specifications, programs, tests, and debugs programs.
Research and troubleshoot application issues.
Create and maintain program documentation.
Management reporting.
Work Challenges
24x7 work environment supporting Exchange operations, which requires either shift work, on call, and/or after hours project work and may include holidays, and weekends
IT environment is constantly changing demanding quick solutions and evolving skills
IT position located at HQ
IT position - there may be some TDY associated with this IT work