DevSecOps Engineer

Description:

The Sr. DevSecOps Engineer implements, automates, and maintains secure cloud infrastructure and CI/CD pipelines. You will build and manage infrastructure-as-code solutions, deploy and secure cloud environments, integrate security controls into development workflows, and drive DevSecOps best practices throughout the software development lifecycle. The ideal candidate has hands-on experience with AWS or Azure, containerization technologies, automation tools, and a strong commitment to improving security, scalability, reliability, and deployment efficiency. 

Key Responsibilities:

Build and maintain secure, NIST 800-53 compliant, resilient, and high-performing cloud-native infrastructure architectures.

- Assess cloud architectures and system designs for security vulnerabilities and implement appropriate remediation strategies.

- Develop and maintain security automation tools and scripts using programming languages such as Python.

- Implement and manage AWS or Azure environments, Docker containers, Kubernetes clusters, GitHub repositories, and dependency management solutions.

- Deploy cloud infrastructure, platform components, HTTP/TLS security configurations, and compliance assets using Terraform, Ansible, Docker, and related technologies.

- Automate routine operational and deployment tasks to improve scalability, consistency, and efficiency.

- Create and manage automated release processes and CI/CD pipelines utilizing Jenkins, Spinnaker, and similar tools.

- Develop and maintain Pipeline as Code (PaC) and Infrastructure as Code (IaC) solutions.

- Deploy and manage cloud resources through scripts, manifests, and automation frameworks.

- Troubleshoot and resolve infrastructure, network, security, and deployment-related issues.

- Utilize AI-assisted development tools, including GitHub Copilot, to generate, review, validate, and improve code and automation workflows. 

Required Qualifications: 

- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related technical discipline.

- 5+ years of experience in DevOps, DevSecOps, Cloud Engineering, or Infrastructure Engineering.

- Proficiency with Linux operating systems and Shell/Bash scripting.

- Strong programming experience with Python.

- Hands-on experience building and operating systems and applications running on AWS or Azure cloud platforms.

- Experience creating Infrastructure as Code (IaC) using Terraform to deploy and manage applications and cloud infrastructure.

- Hands-on experience with Docker image creation and containerization technologies.

- Experience deploying and managing Kubernetes (K8s) clusters.

- Experience utilizing command-line interfaces (CLI) to automate and create repeatable processes.

- Experience creating Pipeline as Code solutions for complex CI/CD workflows and release automation.

- Experience securing cloud environments and integrating security controls into CI/CD pipelines.

- Experience working within large and complex computing environments.

- Strong understanding of computer networks, routing, load balancing, APIs, and web application architectures.

- Ability to troubleshoot and resolve infrastructure, security, and network-related issues.

- Strong interpersonal, communication, and presentation skills.

- Excellent time management skills with the ability to work within aggressive delivery schedules.

- Experience using AI-assisted development tools such as GitHub Copilot for code generation, review, validation, and workflow automation. 

Preferred Qualifications:

 Experience with Terraform, Ansible, Jenkins, Spinnaker, and other DevOps automation platforms.

- Experience implementing NIST 800-53 security controls and compliance requirements.

- Experience building and securing enterprise cloud environments.

- Experience with container security, vulnerability management, and security automation tools.