What are the responsibilities and job description for the DevSecOps Engineer position at FOTOMILL STUDIOS LIMITED?
Dev Sec Ops Engineer
Altamira Technologies is seeking a skilled DevSecOps engineer to design and implement the modernization of a legacy multi-security domain monolith on-prem system into a containerized private/public cloud system with CI/CD processes supporting cyber security requirements to enable rapid capability deployments. Candidate should be prepared to work across Integrated Program Teams to include Software Engineering, System Administration, Cyber Security, Operations, and Program Management to design, implement, maintain new DevSecOps pipelines, and secure cloud-native delivery platforms. Experience dealing with and finding solutions for dissimilar environments between dev/test/prod and multiple-security domains is required, including secure artifact promotion and configuration management across domain boundaries.
This position will require experience with enterprise CI/CD, GitOps, and cloud-native tooling and involve some scripting in languages like BASH and Python with proficiency in at least one modern programming language (Python or Go preferred).
Other skills to include: automated testing, automated deployments (CI/CD pipelines), and branching strategy and implementation, GitOps workflows, policy-as-code enforcement, and secure software supply chain practices.
Candidate, while having access to supporting teams, will largely be self-reliant and capable of designing and implementing solutions with architectural ownership and accountability.
Required Skills:
5 years of experience developing tools and processes to drive DevOps or DevSecOps maturity by automating builds, regression testing, monitoring, and pushing releases across environments
5 years of experience troubleshooting, triaging, and resolving issues for CI/CD pipeline failures or slowness
Experience working in hardened Kubernetes-based platforms; implementing GitOps workflows (ArgoCD preferred), container image build automation (Kaniko), and managing private artifact repositories (Harbor, Nexus, or equivalent).
Experience developing and hosting on-prem, private cloud, and enterprise cloud-native solutions
Experience integrating security controls into CI/CD pipelines, including SAST, DAST, SCA, container scanning, and automated compliance validation.
Experience working with application development teams across the software development life cycle and creating solutions to complex problems within a collaborative team environment
Experience implementing CI/CD platforms (GitLab CI, or Jenkins) and Infrastructure-as-Code using Terraform (preferred) with modular design and environment promotion strategies.
Experience implementing secrets management solutions (Vault, KMS, SOPS, or equivalent) and Kubernetes RBAC design.
TS/SCI clearance (willing to take CI Poly)
Bachelor's degree in Computer Science, Computer Engineering, or related field
Desired Skills:
Experience creating and improving continuous automation across multiple technical stacks
Experience creating and improving continuous deployment tools built on Kubernetes
Experience triaging and resolving issues related to both open-source and commercial tools
Experience defining DevSecOps standards, reference architectures, and reusable platform capabilities that enable consistent delivery patterns across teams
Experience operating in air-gapped or restricted network environments
Experience implementing zero-trust or least-privilege access models within cloud-native environments
Altamira Technologies is seeking a skilled DevSecOps engineer to design and implement the modernization of a legacy multi-security domain monolith on-prem system into a containerized private/public cloud system with CI/CD processes supporting cyber security requirements to enable rapid capability deployments. Candidate should be prepared to work across Integrated Program Teams to include Software Engineering, System Administration, Cyber Security, Operations, and Program Management to design, implement, maintain new DevSecOps pipelines, and secure cloud-native delivery platforms. Experience dealing with and finding solutions for dissimilar environments between dev/test/prod and multiple-security domains is required, including secure artifact promotion and configuration management across domain boundaries.
This position will require experience with enterprise CI/CD, GitOps, and cloud-native tooling and involve some scripting in languages like BASH and Python with proficiency in at least one modern programming language (Python or Go preferred).
Other skills to include: automated testing, automated deployments (CI/CD pipelines), and branching strategy and implementation, GitOps workflows, policy-as-code enforcement, and secure software supply chain practices.
Candidate, while having access to supporting teams, will largely be self-reliant and capable of designing and implementing solutions with architectural ownership and accountability.
Required Skills:
5 years of experience developing tools and processes to drive DevOps or DevSecOps maturity by automating builds, regression testing, monitoring, and pushing releases across environments
5 years of experience troubleshooting, triaging, and resolving issues for CI/CD pipeline failures or slowness
Experience working in hardened Kubernetes-based platforms; implementing GitOps workflows (ArgoCD preferred), container image build automation (Kaniko), and managing private artifact repositories (Harbor, Nexus, or equivalent).
Experience developing and hosting on-prem, private cloud, and enterprise cloud-native solutions
Experience integrating security controls into CI/CD pipelines, including SAST, DAST, SCA, container scanning, and automated compliance validation.
Experience working with application development teams across the software development life cycle and creating solutions to complex problems within a collaborative team environment
Experience implementing CI/CD platforms (GitLab CI, or Jenkins) and Infrastructure-as-Code using Terraform (preferred) with modular design and environment promotion strategies.
Experience implementing secrets management solutions (Vault, KMS, SOPS, or equivalent) and Kubernetes RBAC design.
TS/SCI clearance (willing to take CI Poly)
Bachelor's degree in Computer Science, Computer Engineering, or related field
Desired Skills:
Experience creating and improving continuous automation across multiple technical stacks
Experience creating and improving continuous deployment tools built on Kubernetes
Experience triaging and resolving issues related to both open-source and commercial tools
Experience defining DevSecOps standards, reference architectures, and reusable platform capabilities that enable consistent delivery patterns across teams
Experience operating in air-gapped or restricted network environments
Experience implementing zero-trust or least-privilege access models within cloud-native environments