Key skills
AnsibleAWSAzureChefCloudCyber SecurityDNSDockerGoogle Cloud PlatformJavaKubernetesLinuxMS SQL ServerMySQLPostgresPuppetSMTPSQLTerraformGoogle CloudCloudFormationIAMPostgreSQLSQL ServerGitLabVersion ControlJiraAgileCI/CDChange ManagementCommunicationProblem SolvingPenetration Testing
About this role
Role Overview
- Lead the design and implementation of security practices within the DevOps pipeline for DoD applications, ensuring alignment with regulatory requirements.
- Evaluate and select security tools, integrating them into CI/CD workflows to enhance application security.
- Conduct advanced vulnerability assessments, threat modeling, and penetration testing to proactively identify and mitigate security risks.
- Collaborate with cross-functional teams to develop and promote secure coding practices, incident response plans, and security training.
- Mentor and guide junior and mid-level engineers, fostering knowledge sharing and professional growth within the team.
- Drive the automation of security testing and compliance processes, utilizing Infrastructure as Code (IaC) and security automation tools.
- Stay abreast of industry trends, emerging threats, and best practices in DevSecOps and cybersecurity to continually improve security posture.
- Assessing, designing, developing, testing, and implementing Business Continuity & Disaster Recovery (BC/DR) solutions into a complex environment.
Requirements
- US Citizen with at least an active Top Secret clearance with the ability to obtain and maintain a SCI prior to your start date.
- Bachelor’s degree with 8+ years of experience or a Master’s Degree with 6+ years of experience.
- Additional experience may be considered in lieu of a degree.
- Must have 2+ years of experience with JAVA
- DoD 8140 intermediate certification or DoD 8570 IAM Level II certifications or higher
- Strong understanding of software development paradigms and supporting technologies (e.g. change management & version control, CI/CD, Agile planning tools such as Jira or Gitlab)
- Strong background using Infrastructure as Code (IaC) and Configuration as Code (CaC)
- Strong experience configuring CI/CD pipelines supporting software development activities in a DevSecOps environment
- Strong background in relational databases such as PostgreSQL, MySQL, or MS SQL Server.
- Strong experience administering complex environments with Linux and Windows operating systems, network administration, and networking protocols/functions (e.g., HTTP, HTTPS, SSL/TLS, SMTP, DNS)
- Extensive experience integrating security tooling into a hybrid cloud environment, with a nuanced understanding of the capabilities and drawbacks of each component
- Extensive experience provisioning and managing resources within hybrid IaaS/Cloud infrastructures (e.g., Azure, AWS, Google Cloud Platform, etc.)
- Extensive experience with container technologies such as Docker and container orchestration tools like Kubernetes
- Experience with automated provisioning and configuration tools like Terraform, Bicep, CloudFormation, Chef, Puppet, Ansible or similar technologies
- Experience integrating cloud services into solutions, especially Azure cloud services
- Excellent problem solving and analysis skills, including the ability to logically create structure and order from unstructured inputs.
- Self-starter that is able to work independently while possessing the communication skills to work effectively with software development teams and customers.
- Excellent interpersonal, verbal and written communication skills.
Tech Stack
- Ansible
- AWS
- Azure
- Chef
- Cloud
- Cyber Security
- DNS
- Docker
- Google Cloud Platform
- Java
- Kubernetes
- Linux
- MS SQL Server
- MySQL
- Postgres
- Puppet
- SMTP
- SQL
- Terraform
Benefits
- Health and Wellness programs
- Income Protection
- Paid Leave
- Retirement