Mid-Level DevSecOps Engineer

Description

The company needs a mid-level DevSecOps engineer with an active TS/SCI to join a major project in Herndon, VA. The work covers development, integration and cybersecurity compliance of intelligence capabilities in Development and Production environments.

This role is software engineering first. You design, code, test and maintain software and automation that streamline cybersecurity workflows and make platforms more reliable.

You will build scalable systems and developer tools, and help run DevSecOps pipelines that deploy components across multiple networks into private cloud infrastructure for a government customer.

You will work closely with mission partners, so your work has direct mission impact. You will collaborate with DevSecOps engineers, developers, infrastructure technicians and cybersecurity staff to build and maintain the full stack of a High-Performance Computing system, using open-source technology, that serves thousands of users.

Responsibilities

• Deploy and manage highly available applications, keeping them reliable and scalable.
• Build and run HashiCorp Nomad and Kubernetes clusters for workload orchestration.
• Configure, manage and tune DNS for enterprise-grade systems.
• Write Infrastructure-as-Code using Terraform, Ansible or similar tools.
• Create and maintain multiple GitLab or equivalent CI/CD pipelines that automate deployments and speed up integration.
• Monitor systems, collect logs and troubleshoot to catch and fix problems early.
• Add automated security testing and monitoring to DevOps workflows using ACAS and Trivy.
• Review cybersecurity scan findings and work with the cybersecurity team to identify false positives.
• Help the cybersecurity team assemble the Body of Evidence for false positive exceptions.
• Help the cybersecurity team assemble the Body of Evidence for enterprise software approval of containerized and non-containerized packages.
• Integrate static code analysis tools such as GitLab SAST, Fortify or SonarQube, plus other security controls, into CI/CD pipelines.
• Build and maintain tools that automate cybersecurity analysis and correlation as compliance requirements change.
• Remediate DevSecOps-managed virtual machines, including OS patching, OS STIG implementation and software package updates.
• Build, maintain and monitor configuration management for release products.
• Troubleshoot networks, automation pipelines and infrastructure.

Requirements

• Active TS/SCI and willing and able to pass a CI polygraph.
• Willing and able to work 40 hours per week in a SCIF in Herndon, Virginia.
• At least 3 years of industry software development or software engineering experience.
• At least 5 years of industry DevSecOps experience and a bachelor's degree in computer science, information systems or a related field; or a master's degree and at least 3 years of relevant experience.
• Proven software development experience: you design, write, test, debug and maintain software in at least one language such as Python, Go, Java, C or similar. Building automation tools, APIs or applications is central to the role.
• Strong cloud skills, including deploying, optimizing and troubleshooting cloud environments.
• Proven track record building and operating cloud native applications with Kubernetes and Docker.
• In-depth experience with IaC tools such as Terraform, Ansible or equivalent.
• Solid experience creating and managing CI/CD build pipelines in GitLab or similar tools such as Jenkins or Azure DevOps.
• Strong automation skills in Python, Bash or equivalent. Python or comparable application development experience is required.
• Excellent problem solving, attention to detail, and comfort working when priorities shift quickly.
• Experience applying security best practices in DevSecOps pipelines with tools such as Trivy, Grype, GitLab SAST or SonarQube.
• Familiarity with monitoring tools such as Prometheus, Grafana or ELK Stack.
• Strong knowledge of networking and load balancing technologies.
• Experience with Git and collaborative development workflows.
• Experience with automated deployment technologies such as CloudFormation, Ansible, Puppet or Chef.
• Experience deploying and maintaining open-source and custom applications.
• Moderate Linux system administration experience on Red Hat, Rocky Linux, AlmaLinux or similar.
• Working knowledge of Linux and Windows operating systems, web services and SQL databases.
• Experience working in an Agile environment.
• Nice to have: Security+ or comparable certification for privileged user access.
• Nice to have: experience with distributed processing methods and tools such as REST APIs, microservices and IaaS/PaaS services.
• Nice to have: experience developing and deploying web services.
• Nice to have: experience implementing Docker STIGs.
• Nice to have: experience with CONMON cybersecurity remediation.
• Nice to have: RHCSA, LPIC-1/2, CKA or Docker Certified Associate certification.

Conditions

On-site work in a SCIF in Herndon, Virginia, 40 hours per week.

Virginia pay range is $150,000-$250,000 USD.

Pay depends on factors such as geographic location, federal contract labor category, wage rates, experience, skillsets, education and certifications.

Benefits

• Robust health plan with medical, dental and vision coverage.
• Health Savings Account with company contribution.
• Annual paid time off and paid holidays.
• Paid parental leave.
• 401k with a generous company match.
• Support for financial wellness, retirement planning, family assistance and continued education.
• Training and development opportunities, award programs and company-sponsored events.