Senior DevSecOps Engineer

Senior DevSecOps Engineer

The Senior DevSecOps Engineer is responsible for ensuring the robustness and security of our continuous integration and continuous delivery (CI/CD) pipelines. This role involves implementing infrastructure as code, integrating automated security scanning within the delivery pipeline, managing secrets, and facilitating environment promotion across multiple environments. The Senior DevSecOps Engineer will work closely with the Security Lead to maintain a strong security posture and ensure compliance with FISMA and other regulatory requirements.

Responsibilities

• Design, implement, and maintain CI/CD pipelines to ensure efficient and secure software delivery.
• Implement infrastructure as code to manage and provision infrastructure in a consistent and repeatable manner.
• Integrate automated security scanning within the CI/CD pipelines to identify and mitigate vulnerabilities early in the development process.
• Manage secrets and sensitive information securely, ensuring they are not exposed in the codebase or environment.
• Facilitate the promotion of environments across the four environments identified in Section B.6.11, ensuring smooth transitions and minimal downtime.
• Collaborate with the Security Lead to design and implement security controls and ensure compliance with FISMA and other regulatory requirements.
• Participate in continuous monitoring activities to ensure the security posture of the infrastructure and applications is maintained.
• Mentor and guide junior engineers and other team members on best practices in DevSecOps and platform engineering.

Requirements

• Minimum of twelve (12) years of experience in DevSecOps or platform engineering.
• Strong understanding of Continuous Integration and Continuous Delivery (CI/CD) principles and practices.
• Proficiency in infrastructure as code tools such as Terraform, Ansible, or similar.
• Experience with container orchestration platforms such as Kubernetes.
• Familiarity with automated security scanning tools and practices.
• Strong understanding of secrets management and best practices.
• Knowledge of FISMA and other regulatory compliance requirements.
• Relevant current certification such as AWS Certified DevOps Engineer, Microsoft Certified: DevOps Engineer Expert, Certified Kubernetes Administrator, or equivalent.

• Experience with cloud platforms such as AWS, Azure, or Google Cloud Platform.
• Strong scripting and programming skills in languages such as Python, Bash, or Go.
• Experience with monitoring and logging tools such as Prometheus, Grafana, or ELK stack.
• Knowledge of DevSecOps frameworks and methodologies.
• Excellent communication and collaboration skills, with the ability to work effectively in a team environment.