Senior DevSecOps Engineer

Overview

As a Senior DevSecOps Engineer, you will work with our growing DevSecOps practice delivering features to support cloud and application development. We are looking for a self-starter with experience in cloud platform services and DevSecOps practices such as build/release management, CI/CD practices, process automation, and application security. You will provide technical leadership while fostering collaboration and communication across teams and stakeholders throughout the client organization.

Responsibilities

• Establish development tools and infrastructure for automation.
• Understand the needs of stakeholders and effectively convey requirements to developers and technical teams.
• Automate and improve development, testing, deployment, and release processes.
• Test and examine code written by others and analyze results.
• Ensure systems are safe and secure against cybersecurity threats.
• Identify technical problems, perform root cause analysis, and develop software updates and fixes.
• Work with software developers and engineers to ensure development follows established processes and works as intended.
• Support enterprise cloud applications and infrastructure through infrastructure as code, including automated server and network configurations, large-scale software deployments, monitoring, testing, and CI/CD.
• Integrate security testing and scanning into development and CI/CD processes using SAST and other application security tools.
• Document the as-is state of the environment, perform gap analyses, and produce artifacts that articulate options and recommendations.
• Leverage virtualization and containerization to optimize and modernize software systems.
• Provide technical leadership and mentorship to team members, supporting effective delivery and knowledge sharing across the team.
• Foster cross-team collaboration and communication across the client organization to align technical efforts, resolve dependencies, and support successful delivery.
• Engineer and implement solutions and provide recommendations for continuous improvement of the services provided.
• Present regular status updates and provide cross-training to other DevSecOps team members.

Qualifications

• Ability to obtain and maintain a U.S. government security clearance.
• Bachelor's degree and 10+ years of total experience.
• 5 years of experience with one or more cloud platforms (i.e., AWS, Azure, or GCP).
• 5 years of experience with source code management (SCM) platforms, including GitLab.
• 5 years of experience with one or more programming or scripting languages.
• 5 years of application DevSecOps experience with hands-on development experience in an Agile environment.
• 3 years of experience building and deploying Docker containers and utilizing platforms such as Kubernetes.
• 5 years of experience implementing infrastructure as code and orchestration.
• 5 years of experience building CI/CD pipelines with tools such as Jenkins, GitLab CI/CD, GitHub Actions, CircleCI, or Travis CI.
• 5 years of experience integrating deployments with industry-standard DevSecOps tooling and orchestration.
• Experience integrating test automation, including performance, security, and functional tests, into CI/CD pipelines.
• Experience with Static Application Security Testing (SAST) and integrating security scanning into development and CI/CD processes.
• Experience with Wiz, Palo Alto Cortex, or similar cloud security tools.
• Experience providing technical leadership and mentorship to engineering teams.
• Demonstrated ability to work independently, take initiative, and drive technical efforts with minimal oversight.
• Experience fostering collaboration and communication across technical teams and client stakeholders.
• Excellent written and verbal communication, interpersonal, and collaborative skills.

Preferred

• Certifications:
• AWS Certified DevOps Engineer
• AWS Certified Solutions Architect – Professional
• Microsoft Certified: DevOps Engineer Expert
• SAFe DevOps Certification
• Experience implementing automated testing frameworks, including Selenium.
• Experience documenting an as-is state of the environment, performing gap analyses, and producing artifacts that articulate options and recommendations.
• Experience with scripting in Concourse, Bash, PowerShell, Python, Groovy, or Ruby.
• Experience with automation tools, including Chef, Terraform, CloudFormation, or Ansible.