Senior IT DevSecOps Engineer

Senior IT DevSecOps Engineer
Washington, DC – ONSITE
Type: Multi-year Contract
Open to W2 and C2C
ship required per government contract 
Must be able to obtain Public Trust clearance

Candidate will help build GitLab-based DevSecOps automated pipelines into AWS gov cloud; support and enable application delivery times on CI/CD platform; manage and operate GitLab CI/CD. 
 
Certification:
•    GitLab certification desired but not required. 
•    AWS certification desired but not required. 
 
Knowledge, Skills and Experience:
•    Version Control Systems 
•    Proficiency with Git 
•    Advanced knowledge of GitLab, including CI/CD pipelines, merge requests, and issue tracking 
•    Familiarity with branching, promotion, and release strategies (such as SemRel) 
•    Familiarity using internalized registries and repositories (Nexus dependency management, internal container registries, etc.) 
 
CI/CD 
•    GitLab CI/CD 
•    GitLab runners (configuration and management) 
•    GitLab components (Or generally developing and utilizing templates for CI/CD jobs in any platform, such as GitHub Actions) 
 
Cloud Platforms 
•    Demonstrated proficiency with AWS (Lambda, EC2, S3, EBS/EFS, ECS, EKS, SNS, CloudWatch) 
 
Containerization 
•    Docker (building, deploying, and managing containers) 
•    Kubernetes (orchestration, deployment strategies, security, troubleshooting) 
•    Container security best practices 
•    Including container hardening strategies, such as maintaining a secure “golden” image 
•    Deploying and managing container-based runners hosted on EKS 
•    GitOps tools and deployment principles (such as ArgoCD/Flux) 

Security Testing 
•    Static Application Security Testing (SAST) 
•    Dynamic Application Security Testing (DAST) 
•    Interactive Application Security Testing (IAST) 
•    Software Composition Analysis (SCA) 
•    Container scanning tooling (Trivy, Prisma/Twistlock, Neuvector, etc..) 
 
Infrastructure as Code (IaC) 
•    Terraform (writing, managing, and optimizing Terraform configurations) 
•    Other IaC tools (e.g., CloudFormation, Ansible) 

Scripting and Programming 
•    Proficiency in scripting languages (e.g., Python, Bash) 
•    Basic to intermediate programming skills 
•    Experience working with a Linux-based shell, managing way around a Linux-based system 
•    Ability to work well in a paired programming environment at times 
 
Automation 
•    Creating and maintaining automated security checks and remediations 
•    Integrating security into automated deployment processes 
•    Incorporating linting tooling into development processes 
•    Incorporating unit & performance testing into deployment processes 

System One, and its subsidiaries including Joulé, ALTA IT Services, and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.

#M1
#LI-VH1
#DI-VH1

Ref: #851-Rockville-S1