Overview

DevSecOps Engineer - Principal II

woodcons.com

Seeking a DevSecOps Systems Engineer to support the Continuous Integration and Continuous Deployment (CI/CD) activities with AWS experience to support the design, development, and deployment of advanced cybersecurity capabilities. The DevSecOps team is responsible for the Program's Platform-as-a-Service operating environment, automation and self-service Linux platform provisioning, hybrid (public and private) cloud management. Responsibilities may also include supporting the ART as a SAFe Product Owner (Cyber) to support the design, development, and deployment of advanced cybersecurity capabilities.

Security Clearance Requirements:

This position requires all candidates to be U.S. Citizens and possess an Active Secret clearance with ability to obtain a TS/SCI. Candidates must be able to receive DHS suitability prior to starting employment.

Responsibilities

• Working alone on individual projects while being involved in larger projects as a team effort with minimal supervision of the Team Leads.
• Supporting the development of system security documentation on both new and deployed DevSecOps solutions.
• Supporting the development of new DevSecOps capabilities.
• Supporting the operations and maintenance aspects of deployed DevSecOps capabilities.
• Building, testing, and administering Kubernetes clusters, including Amazon EKS and Red Hat OpenShift.
• Assisting application teams with on-boarding to a Kubernetes platform in areas such as resource requirements, capacity analysis, and troubleshooting support.

Qualifications

Required Education & Years of Experience

• BS in in Systems Engineering, Computer Science, Information Systems or related technical field and 10 years of directly relevant software development experience.
  • Eight (8) years of related experience (for a total of eighteen (18) or more years) may be substituted for a degree

Required Skills

• 10 years of applicable experience.
• 4 years of directly relevant experience in AWS, Enterprise Linux, Kubernetes (OpenShift or EKS), Container Development, Ansible or Chef Development, Pipeline Development, Jenkins, GitHub, Artifactory or Nexus, SonarQube, Twistlock, Cloudbees, Terraform, CloudWatch.

Desired Skills

• Familiarity with following CISA practices:
  • Securing the Software Supply Chain
  • Cybersecurity Best Practices
  • Open-Source Software Security
• Familiarity with NIST SP 800-218, Secure Software Development Framework V1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities
• Experience with Cloud Formation Templates
• Experience with Terraform
• Experience working with AWS Aurora RDS or AWS PostgreSQL RDS
• Experience working with NextAuth.js
• OKTA Integration Experience
• Experience working in an agile development environment
• Experience implementing DISA STIG settings
• Experience working with Ansible Tower or AWX
• Technical understanding of cybersecurity attack techniques and associated mitigation techniques
• Strong experience and/or familiarity with one of more of the following program languages: Java, Perl, Ruby, Python, JavaScript, Groovy

Desired Certifications

• AWS Certified Cloud Practitioner
• Certifications related to Agile development and Scaled Agile Framework (SAFe) such as Scrum Master, Product Owner, SAFe Agilist (SA), SAFe Practitioner (SP) or SAFe Program Consultant (SPC)

WOOD is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.