Key skills

CI/CD pipelinesAWSAzureGCPAPIsPythonBashPowerShellTerraformCloudFormationDockerKubernetesSASTDASTIASTSCAnetwork securityfirewall configurationscybersecurity principlesISO 27001HIPAAPCI-DSSthreat modelingrisk assessmentGitSIEM toolslog analysisidentity and access managementserverless architecturesmachine learningAI in securitycommunicationcollaborationproblem-solvinganalytical thinkingleadershipmentoringAIMachine LearningServerlessIAMVersion ControlCI/CDLeadershipMentoringCommunicationCollaborationPenetration TestingNetwork SecurityFirewall

About this role

CACI International Inc is seeking a Sr. DevSecOps Engineer to enhance the Global Combat Support System-Marine Corps program. The role involves implementing secure CI/CD pipelines, enforcing security policies, and collaborating with teams to ensure security best practices are followed.

Responsibilities:

Implement and maintain secure CI/CD pipelines, integrating security measures throughout the software development lifecycle
Develop, implement, and enforce security policies and best practices across development and operations teams
Conduct regular security assessments, vulnerability scans, and penetration testing to identify and address potential security risks
Automate security processes and integrate security tools into existing DevOps workflows to ensure consistent and efficient security practices
Collaborate with development, operations, and security teams to foster a culture of security awareness and implement secure coding practices

Requirements:

Bachelor's degree in Computer Science, Software Engineering, or a related field
10+ years of experience in DevOps, security engineering, or a similar role
Proven track record of implementing and maintaining secure CI/CD pipelines
Experience with cloud platforms (AWS, Azure, GCP)
Familiarity with APIs and web services
Proficiency in scripting languages (e.g., Python, Bash, PowerShell)
Experience with infrastructure as code tools (e.g., Terraform, CloudFormation)
Knowledge of containerization and orchestration (Docker, Kubernetes)
Familiarity with security tools and practices (e.g., SAST, DAST, IAST, SCA)
Understanding of network security and firewall configurations
In-depth understanding of cybersecurity principles and best practices
Experience with compliance standards (e.g., ISO 27001, HIPAA, PCI-DSS)
Knowledge of threat modeling and risk assessment methodologies
Must be a US citizen
Familiarity with version control systems (e.g., Git)
Strong communication and collaboration abilities
Problem-solving and analytical thinking skills
Ability to work in a fast-paced, dynamic environment
Leadership experience and mentoring capabilities
Experience with SIEM tools and log analysis
Knowledge of identity and access management (IAM) systems
Familiarity with serverless architectures and their security implications
Experience with machine learning and AI in security contexts
Bachelor's degree in Computer Science, Software Engineering, or a related field.