DevSecOps Engineer

Job Title: DevSecOps Engineer Location: REMOTE

Description:
Client is seeking a DevSecOps Engineer to strengthen our software development lifecycle by embedding security practices into every stage of delivery. This role will work across development, operations, and security teams to ensure applications and infrastructure are secure, compliant, and resilient, while maintaining speed and efficiency in deployment.
The ideal candidate will be responsible for streamlining our development and operational processes, ensuring efficient deployment and management of applications in cloud environments. This role requires a strong understanding of cloud computing, IT infrastructure, and software development practices. You will work closely with development teams to implement CI/CD pipelines, manage cloud resources, and enhance system performance.

Key Responsibilities:
10 years experience in the performance of Release management in DEV/SIT/CAT/PROD environments for major/minor releases, patches and upgrades
Ability to Create/ manage/support Continuous Integration/Continuous Delivery (CI/CD) pipeline;
10 years experience in the support of and to provide code promotion and monitoring; and Support data fixes as required.
3 years experience with Copilot and /or any AI-enabled tasks to convert manual tasks into automated workflows
Demonstrated expertise in AI technologies, methodologies, frameworks, tools, and enterprise AI implementation practices.
Integrate existing automation frameworks with AI-based solutions to improve coverage, reliability, and efficiency.
Ensure all AI scripts and programs are fully executable on postal-issued laptops within approved security and environment constraints.
5 years experience in the design, implementing, and maintaining secure CI/CD pipelines with automated security checks.
Knowledge of Integration application security testing tools (SAST, DAST, SCA) into development workflows.
Ability to collaborate with developers to enforce secure coding practices
3 year s Expertise Secure Coding Standards enforced during development
Static and Dynamic Application Security Testing (SAST/DAST), integrated into pipelines.
Automate compliance checks, code analysis in CI/CD Pipelines.
Hands on experience with Jenkins, GitLab CI/CD, Azure DevOps, or CircleCI to embed security checks.
Deep knowledge of AWS, Azure, or Google Cloud Platform security services and configurations.
Experience securing Docker and Kubernetes workloads.
Proficiency in languages like Python, Java, to automate security tasks
Familiarity with Terraform, Ansible, or Cloud Formation, with emphasis on secure configurations.
Collaborate with software developers and IT staff to oversee code releases and deployments.
Design and implement scalable cloud architecture using platforms such as AWS, Google Cloud Platform, or Azure.
Manage containerization technologies such as Docker and orchestration tools like Kubernetes.
Utilize Infrastructure as Code (IaC) tools like Ansible for automated provisioning of infrastructure.
Ensure system reliability through monitoring, logging, and alerting using tools like Jenkins and Git.
Develop RESTful APIs and microservices to facilitate communication between applications.
Maintain databases including MySQL, PostgreSQL, Oracle, and Microsoft SQL Server.
Participate in Agile development processes to improve software delivery cycles.
Troubleshoot issues across the application stack from front-end to back-end services.
Manage and secure cloud environments (AWS, Azure, Google Cloud Platform) and containerized workloads (Docker, Kubernetes)
Implement Infrastructure as Code (IaC) with secure configurations using Terraform, Ansible, or Cloud Formation.
Monitor and respond to security incidents, leveraging SIEM tools and observability platforms.
Ensure compliance with industry standards and regulations (ISO 27001, NIST, GDPR, HIPAA, PCI DSS).
Provide training and guidance to teams on DevSecOps best practices.

Qualifications:
Bachelor s degree in Computer Science, Cybersecurity, or related field (or equivalent experience).
Proven experience in DevOps, Security Engineering, or Cloud Security.
Strong knowledge of CI/CD tools (Jenkins, GitLab CI/CD, Azure DevOps).
Hands on experience with cloud platforms (AWS, Azure, Google Cloud Platform).
Proficiency in programming/scripting languages (Python, Java).
Familiarity with containerization and orchestration (Docker, Kubernetes).
Experience with security automation tools and vulnerability management.
Experience with AWS & Azure & the development of tools and processes to drive DevSecOps maturity by automating builds, regression testing, monitoring, and pushing releases across environments Experience with troubleshooting, triaging, and resolving issues in CI/CD pipeline failures or latency Experience with developing enterprise cloud-native platforms using Kubernetes, Docker, or CI/CD tools, including GitHub Actions or GitLab CI/CD Experience with employing an Infrastructure as Code (IaC) approach to managing cloud environments.

Preferred Certifications:
Certified DevSecOps Professional (CDP) Certified Kubernetes Security Specialist (CKS) AWS/Azure/Google Cloud Platform Security Certifications

Additional Required Skills/Experience:
o A minimum of thirteen (13) to twenty (20) years relevant experience.
o A degree from an accredited College/University in the applicable field of services is required. If the individual's degree is not in the applicable field, then four additional years of related experience is required.

Additional Provisions:
Pass both a client mandated clearance process to include drug screening, criminal history check and credit check.
Once candidate s resume is approved and interview passed, the agency is responsible for providing drug screening. Failure to submit the drug screening results will delay the security clearance process.
If a candidate is given an interim clearance, continuation of employment is then based on the candidate receiving a sensitive clearance.
Candidate must have lived in the US for the past 5 years.
Cannot have more than 6 months travel outside the United States within the last five years. Military Service excluded. (Exception does not include military family members.) All overtime must be pre-approved in writing by the client manager or his/her designated representative.
Agency will not be reimbursed for overtime charges without previous written authorization. Authorized overtime will be reimbursed at straight time.
The enforced dress code is business casual, i.e. collared shirt with slacks for men, no skirts above the knee for women. Place and Period of Performance Hours of support:
o The standard work week for contract staff will be 5 days a week and 8 hours per day preferable Monday through Friday.