Contract -- Sr. IT DevSecOps-- 100% ONSITE in Washington DC

Should you be interested, please send me a copy of your resume in word format along with you LinkedIn URL.

TITLE - Sr. IT DevSecOps

Location: 100% ONSITE in Washington DC

ONLY local candidates

Candidate will help build GitLab-based DevSecOps automated pipelines into AWS gov cloud; support and enable application delivery times on CI/CD platform; manage and operate GitLab CI/CD.

Certification

GitLab certification is desired but not required.

AWS certification is desired but not required.

Version Control Systems

• Proficiency with Git

• Advanced knowledge of GitLab, including CI/CD pipelines, merge requests, and issue tracking

• Familiarity with branching, promotion, and release strategies (such as SemRel)

• Familiarity using internalized registries and repositories (Nexus dependency management, internal container registries, etc.)

CI/CD

• GitLab CI/CD

• GitLab runners (configuration and management)

• GitLab components (Or generally developing and utilizing templates for CI/CD jobs in any platform, such as GitHub Actions)

Cloud Platforms

• Demonstrated proficiency with AWS (Lambda, EC2, S3, EBS/EFS, ECS, EKS, SNS, CloudWatch)

Containerization

• Docker (building, deploying, and managing containers)

• Kubernetes (orchestration, deployment strategies, security, troubleshooting)

• Container security best practices

• Including container hardening strategies, such as maintaining a secure "golden" image

• Deploying and managing container-based runners hosted on EKS

• GitOps tools and deployment principles (such as ArgoCD/Flux)

Security Testing

• Static Application Security Testing (SAST)

• Dynamic Application Security Testing (DAST)

• Interactive Application Security Testing (IAST)

• Software Composition Analysis (SCA)

• Container scanning tooling (Trivy, Prisma/Twistlock, Neuvector, etc..)

Infrastructure as Code (IaC)

• Terraform (writing, managing, and optimizing Terraform configurations)

• Other IaC tools (e.g., CloudFormation, Ansible)

Scripting and Programming

• Proficiency in scripting languages (e.g., Python, Bash)

• Basic to intermediate programming skills

• Experience working with a Linux-based shell, managing way around a Linux-based system

• Ability to work well in a paired programming environment at times

Automation

• Creating and maintaining automated security checks and remediations

• Integrating security into automated deployment processes

• Incorporating linting tooling into development processes

• Incorporating unit & performance testing into deployment processes