Job Requirements
Reston, VA
Public Trust CI Polygraph
Career Level not specified
Salary not specified
Join Premium to unlock estimated salaries
Job Description
OVERVIEW:
We are seeking a Sr. DevSecOps Engineer to play a critical role in designing, implementing, and maintaining secure and efficient software development and deployment pipelines. You will collaborate with cross-functional teams to integrate security practices seamlessly into the development and operations lifecycle, ensuring the delivery of high-quality, secure, and reliable software solutions.
GENERAL DUTIES:
REQUIRED QUALIFICATIONS:
CLEARANCE:
We are seeking a Sr. DevSecOps Engineer to play a critical role in designing, implementing, and maintaining secure and efficient software development and deployment pipelines. You will collaborate with cross-functional teams to integrate security practices seamlessly into the development and operations lifecycle, ensuring the delivery of high-quality, secure, and reliable software solutions.
GENERAL DUTIES:
- Collaborate with customers and internal teams to design and implement technical solutions across multiple classification environments, working independently or collaboratively to address complex requirements.
- Develop CI/CD pipelines from scratch in GitLab and Jenkins with integrated security scanning and STIG compliance validation, providing expert guidance on pipeline troubleshooting and DevSecOps best practices.
- Create and maintain Infrastructure as Code (IaC) templates, primarily using CloudFormation, to architect highly available, resilient, and secure DevSecOps tool infrastructure across AWS environments (GovCloud, C2S, TC2S) while ensuring STIG compliance.
- Lead advanced troubleshooting by analyzing system and application logs via Linux command-line tools, conducting root cause analysis, and developing mitigation strategies for service degradation.
- Provide expert guidance to development teams on secure coding practices, STIG compliance, and vulnerability remediation in support of ATO efforts, while mentoring junior engineers through code reviews, IaC best practices, and technical documentation.
REQUIRED QUALIFICATIONS:
- Certification to satisfy DoD 8140/8570 (e.g., Security+, or equivalent).
- 5+ years as a DevSecOps Engineer, DevOps Engineer, or similar.
- Strong hands-on Linux experience.
- Experience with designing, deploying, and managing production-grade
- Kubernetes (K8s) or OpenShift clusters via automation with Ansible and
- Terraform and/or CloudFormation in on-prem and cloud environments.
- Experience with CI/CD pipelines (e.g. GitLab, or equivalent) and containerization.
- Experience with Helm chart development and STIGs (preferred).
CLEARANCE:
- Active TS/SCI with CI Polygraph minimum required
group id: 90943786