DevSecOps Engineer

1 month ago


Washington, United States Latitude, Inc. Full time
Job DescriptionJob Description

Growing government contractor company looking to hire Sr. DevSecOps Engineer. Due to legal contract and the position requiring a security clearance only US Citizens can be considered for the position. 

The DevSecOps Engineer SME will support and provide expertise to a successful cybersecurity and privacy program for a government customer. The DevSecOps Engineer SME will be responsible for designing, implementing, and maintaining secure systems and networks. The SME will work closely with cross-functional teams, including IT, network engineering, and cybersecurity, to ensure that systems and networks are secure, compliant with applicable regulations, and protected against unauthorized access and other security risks.

 

Duties / Responsibilities: This position will include, but is not limited to, the following tasks:

 

  • Configure and build Kubernetes clusters (EKS) implementing security best practices.
  • Create CI/CD pipelines for application builds and security use cases leveraging GitLab CI.
  • Use GitOps process builds leveraging Flux CD, creating security configurations for application and improvements to currents designs.
  • Administer and improve the security pipeline for static application security testing (SAST), dynamic application security testing (DAST), vulnerability and compliance checks, and overall strategy of deployment.
  • Assist with configuration and design of APP Mesh and micro-service design from a security perspective.
  • Containerize security tools.
  • Develop Terraform modules for security needs, to include Kubernetes cluster builds (EKS) and general AWS resources.
  • Perform as a part of Agile development teams to deliver an end-to-end automation of deployment, monitoring, and infrastructure management in a cloud environment.

 

 

  • Build and configure delivery environments supporting CD/CI tools using an Agile delivery methodology.
  • Create scripts and/or templates to automate and/or bootstrap infrastructure provisioning and management tasks.
  • Work closely with development team to create an automated continuous integration (CI) and continuous delivery (CD) system.
  • Work together with vendors and other IT personnel for problem resolution.
  • Monitor and support all installed systems and infrastructure.
  • Develop custom scripts to increase system efficiency and lower the human intervention time on any tasks.
  • Contribute to the design of information and operational support systems.
  • Evaluate application performance, identify potential bottlenecks, develop solutions, and implement them with the help of developers.

 

Basic Required Qualifications and Skills:  Note: These are mandatory items that all candidates must have when making application to IMC for this position. Please ensure that your submission addresses each of these requirement items. Candidates without these required elements will not be considered.

 

  • Bachelor's degree in business, information technology, or related field of study.
    • 10 years of experience in computer security may substitute for degree.
  • 7+ years of experience in cybersecurity.  
  • At start date, must possess one of the following professional certifications in ACTIVE Status. (Similar level certifications considered on a case-by-case basis).
    • CISM, CISSP, GSLC, CEH, LPT, CPT
  • Experience with the following:
    • GitLab CI and creating templates and multi-stage pipelines.
    • Kubernetes best practices and App Mesh (Istio).
    • Creating organizational golden images and implementing security and hardening needs.
    • OPA and Kubescan for compliance and hardening.
    • Terraform and creating modules.
    • Prometheus for monitoring and writing scrape jobs to ingest security appropriate metrics.
    • GitOps especially Flux and its best practices to improve processes and delivery.
    • Fully automating CI/CD pipelines end-to-end, from code commits to production.
    • Deploying and monitoring web applications in AWS.
    • Infrastructure as Code and infrastructure testing strategies.
    • Systems reliability, load balancing, monitoring, logging.
    • Secure development, coding, and engineering practices.
  • Strong scripting skills, including shell scripts, Perl, Ruby, Python, Go, Groovy, Helm, etc.
  • Excellent knowledge of networking technologies, particularly with OSI network layers and TCP/IP.
  • Excellent oral, written, and verbal communication skills.
  • Knowledge of:
    • NIST Cybersecurity and Risk Management frameworks and associated requirements.
    • Risk management processes (e.g., methods for assessing and mitigating risk).
    • Cybersecurity/privacy principles and cyber threats and vulnerabilities.

Powered by JazzHR

0jOzeBibY8


  • DevSecOps Engineer

    3 days ago


    Washington, United States Bana Solutions, LLC Full time

    Job Summary We are on the lookout for a skilled Mid-Level DevSecOps Engineer with 5-10 years of relevant experience to strengthen our dynamic team. The ideal candidate will be technically adept, with a deep understanding of security integration in system architecture, complex data systems, and crafting high-reliability systems within a DevOps culture. The...

  • DevSecOps Engineer

    1 week ago


    Washington, United States Mount Indie Full time

    Mount Indie is in search of a Sr. DevSecOps Engineer to design, implement, and maintain secure and efficient CI/CD pipelines. Responsibilities: • Work across development, operations, and security teams to integrate security practices into the SDLC. • Provide design, implementation, and maintenance efforts to CI/CD pipelines, incorporating automated...


  • Washington, United States Copper River Management Company Full time

    Copper River Cyber Solutions is seeking a Senior DevSecOps Engineerto join our team in support of a new contract at the Department of Health and Human Services Administration for Strategic Preparedness and Responsiveness. This position will be performed remotely with the occasional need for an onsite meeting in the Washington D.C. area.The Senior DevSecOps...


  • Washington, United States IBM Full time

    IntroductionA career in IBM Consulting is rooted by long-term relationships and close collaboration with clients across the globe. You'll work with visionaries across multiple industries to improve the hybrid cloud and AI journey for the most innovative and valuable companies in the world. Your ability to accelerate impact and make meaningful change for your...


  • Washington, United States MAGNUS Management Group Full time

    Role Description Determines, develops, or manages DevSecOps and Agile deployment solutions and has experience serving as the engineer of complex technology implementations in a cloud-based or hybrid cloud product-centric environment. Responsible for bridging the gap between legacy development or operations teams and working toward a shared culture and...

  • DevSecOps Engineer

    2 weeks ago


    Washington, United States latitude Full time

    Growing government contractor company looking to hire Sr. DevSecOps Engineer. Due to legal contract and the position requiring a security clearance only US Citizens can be considered for the position. The DevSecOps Engineer SME will support and provide expertise to a successful cybersecurity and privacy program for a government customer. The DevSecOps...

  • DevSecOps Engineer

    4 weeks ago


    Washington, United States Latitude, Inc. Full time

    Job DescriptionJob DescriptionGrowing government contractor company looking to hire Sr. DevSecOps Engineer. Due to legal contract and the position requiring a security clearance only US Citizens can be considered for the position. The DevSecOps Engineer SME will support and provide expertise to a successful cybersecurity and privacy program for a government...

  • DevSecOps Engineer

    3 weeks ago


    Washington, United States Mount Indie Full time

    Job DescriptionJob DescriptionMount Indie is in search of aSr.DevSecOps Engineer to design, implement, and maintain secure and efficient CI/CD pipelines.Responsibilities:Work across development, operations, and security teams to integrate security practices into the SDLC.Provide design, implementation, and maintenance efforts to CI/CD pipelines,...

  • DevSecOps Engineer

    1 day ago


    Washington, United States Motion Recruitment Full time

    An Alexandra, VA based SaaS company is searching for a DevSecOps Engineer to join their team due to growth. Their software is used by enterprise companies, companies in the energy sector, as well as the defense industry. Their product is used for crisis management, critical infrastructure risk, cyber and physical threats, and incident planning. They are on...

  • DevSecOps Engineer

    1 day ago


    Washington, United States Motion Recruitment Partners, LLC Full time

    An Alexandra, VA based SaaS company is searching for a DevSecOps Engineer to join their team due to growth. Their software is used by enterprise companies, companies in the energy sector, as well as the defense industry. Their product is used for crisis management, critical infrastructure risk, cyber and physical threats, and incident planning. They are on...

  • DevSecOps Engineer

    2 days ago


    Washington, Washington, D.C., United States Motion Recruitment Full time

    An Alexandra, VA based SaaS company is searching for a DevSecOps Engineer to join their team due to growth. Their software is used by enterprise companies, companies in the energy sector, as well as the defense industry. Their product is used for crisis management, critical infrastructure risk, cyber and physical threats, and incident planning. They are on...


  • Washington Dc, United States Motion Recruitment Partners, LLC Full time

    We're partnered with one of the largest business consultancies in the world that is ramping up their Cloud Platform team. They are looking for a DevSecOps Platform Engineer to build out, secure, and integrate automation tools into their hybrid OnPrem/AWS environment. You will be responsible for developing and modifying pipelines and providing technical...

  • DHS HSEN

    4 weeks ago


    Washington, United States Versar, Inc. Full time

    Job DescriptionJob DescriptionPosition SummaryBayFirst Solutions, a subsidiary of Versar, Inc., is seeking a Senior Security Engineer (DevSecOps) to support the Department of Homeland Security’s Enterprise Engineering Division (EED) within the Office of the Chief Information Officer (OCIO). This candidate will be a member of a high functioning team...


  • Washington, United States Mount Indie Full time

    Job DescriptionJob DescriptionMount Indie is in search of aSr.DevSecOps Engineer to design, implement, and maintain secure and efficient CI/CD pipelines. Responsibilities:Work across development, operations, and security teams to integrate security practices into the SDLC.Provide design, implementation, and maintenance efforts to CI/CD pipelines,...


  • Washington, United States Eliassen Group Full time

    Eliassen Group is supporting one of our large government integrators in the search for a Platform DevSecOps Engineer. This position will be a 6-month contract to hire opportunity and 100% remote, however candidate must be available for scrum meetings on EST time. Due to the sensitive nature of this position's work our client will only hire candidates who are...


  • Washington DC, United States Motion Recruitment Full time

    We’re partnered with one of the largest business consultancies in the world that is ramping up their Cloud Platform team. They are looking for a DevSecOps Platform Engineer to build out, secure, and integrate automation tools into their hybrid OnPrem/AWS environment. You will be responsible for developing and modifying pipelines and providing technical...


  • Washington, United States Eliassen Group Full time

    Eliassen Group is supporting one of our large government integrators in the search for a Platform DevSecOps Engineer. This position will be a 6-month contract to hire opportunity and 100% remote, however candidate must be available for scrum meetings on EST time. Due to the sensitive nature of this position's work our client will only hire candidates who are...


  • Washington, United States Eliassen Group Full time

    Eliassen Group is supporting one of our large government integrators in the search for a Platform DevSecOps Engineer. This position will be a 6-month contract to hire opportunity and 100% remote, however candidate must be available for scrum meetings on EST time.Due to the sensitive nature of this position's work our client will only hire candidates who are...


  • Washington, United States Eliassen Group Full time

    Eliassen Group is supporting one of our large government integrators in the search for a Platform DevSecOps Engineer. This position will be a 6-month contract to hire opportunity and 100% remote, however candidate must be available for scrum meetings on EST time.Due to the sensitive nature of this position's work our client will only hire candidates who are...


  • Washington, United States Eliassen Group Full time

    Eliassen Group is supporting one of our large government integrators in the search for a Platform DevSecOps Engineer. This position will be a 6-month contract to hire opportunity and 100% remote, however candidate must be available for scrum meetings on EST time.Due to the sensitive nature of this position's work our client will only hire candidates who are...