DevSecOps Engineer

Job Title: DevSecOps Engineer – Auburn, AL

Company Overview: Integrated Solutions for Systems (IS4S) is a fast-growing small business at the forefront of developing innovative solutions for the warfighter. We use applied research and development combined with novel systems integration to enhance capabilities of our armed forces.

Position: DevSecOps Engineer

Location: Auburn, AL; Aberdeen, MD

Job Type: Full-time

Job Description: IS4S is seeking a DevSecOps Engineer in Auburn, AL to assist development enabling Command and Control (C2), Fires, and Electromagnetic Warfare (EW) technologies for the DoD. The person or persons filling this position will integrate into an existing, multi-disciplinary team to create, develop, integrate, and deploy solutions used by warfighters. Responsibilities include

·       Assisting with architecture, design, development, integration, testing, and deployment

·       Creating pipelines to automate testing and deployment

·       Maintaining a strong cybersecurity posture while incorporating modern development tools and practices

·       Identifying vulnerabilities, real or perceived, adjudicating them, and either explaining false positives or developing a Plan of Action and Milestones (POAM)

·       Integrating security and compliance into products, including encryption, access management, and system logging

·       Adhering solutions to DoD Security Technical Implementation Guides (STIGs)

·       Develop and maintain cybersecurity artifacts (scan results, POAMs, SBOMs, system diagrams, etc.)

·       Communicating and interacting with customers, stakeholders, and other companies

The challenges facing our nation are constantly evolving. Therefore, we are looking for self-driven, entrepreneurial team members willing and able to constantly learn, adapt, and find ways to develop and integrate solutions. Selected applicants will be expected to gain familiarity with the underlying domain (e.g., EW, Fires) and its role in the larger system of systems to incorporate warfighter needs throughout the solution. They will be given freedom to solve problems and develop solutions with the expectation of owning their tasks and responsibilities. They will also integrate into an existing team that provides support and to ensure designs and solutions conform to and enhance the end product.

Required Abilities, Experience, and Skills:

·       Bachelor’s degree or higher in engineering, computer science, or related technical field (for full-time applicants)

·       In pursuit of a Bachelor’s degree or higher in engineering, computer science, or related technical field (for part-time applicants)

·       Experience developing, testing, and delivering applications within a DevSecOps framework including proficiency with common platforms and environments such as GitLab, AWS, Azure, etc.

·       Experience with software deployment processes, including packaging, configuration, and release to production or test environments

·       Experience with SAST, DAST, SCA, and DCA

·       Ability to understand CVEs, develop and implement mitigations, and communicate false positives

·       Understanding of containerization and containerized deployment (e.g., Docker, Rancher, Kubernetes, etc.)

·       Experience with programming and scripting languages (e.g., C , Go, Bash, Java, Javascript)

·       Understanding of Unix system administration

·       Ability to work independently, take initiative, and manage tasks with minimal direction

·       Must be able to travel to support customer engagements, integration and testing in live environments, occasionally working non-standard hours to match exercise schedules

·       Must be able to lift and carry computing and networking equipment in support of transit and installation

·       Possess strong written and verbal communication skills

·       US Citizenship is required

Desired Experience and Skills:

·       In-depth knowledge of NIST 800, CMMC, DoD DISA IL-4/5/6

·       Knowledge of authentication and authorization protocols (e.g., SAML, OAuth, OIDC) and access control methods (PKI, MFA, ABAC)

·       Understanding of the operational requirements for systems functioning in DIL/Tactical Edge environments

·       In-depth knowledge of containerized deployment using Kubernetes and Helm

·       Familiarity Apollo and Rubix

·       Exposure to distributed systems, microservices architectures, or high-availability systems

·       Experience with Mission Command or C2 systems, especially those dealing with Fires and Electromagnetic Warfare

Benefits Summary:

·       Competitive salary with comprehensive health and wellness benefits

·       Dynamic and collaborative work environment

·       Employee ownership

·       Medical, dental, and vision care plans

·       Paid time-off and parental leave programs

·       Group term life insurance

·       401(k) retirement plan

·       Tuition Assistance, Training, and education development offerings