Sr. DevSecOps Engineer

CDW is seeking a Sr. DevSecOps Engineer for a remote 6-month contract.

Job Type: 6-month contract

Location: Remote

Pay Rate: $90/ hour

Start: ASAP

Must have the following certification combinations:

GIAC Security Leadership Certification (GSLC) AND Certified Information Security Manager (CISM) AND CompTIA Cybersecurity Analyst (CySA+) certifications

-OR-

Certified Information Systems Security Professional (CISSP) AND CompTIA Cybersecurity Analyst (CySA+) certifications

Responsibilities:

• Collaborate with cross-functional teams to design and implement secure cloud architectures in AWS GovCloud, adhering to industry best practices and compliance standards.
• Develop and maintain CI/CD pipelines to automate the deployment, testing, and monitoring of cloud-based applications and infrastructure components.
• Implement and manage security controls, including IAM policies, encryption mechanisms, and network security configurations, to protect against unauthorized access and data breaches.
• Perform regular security assessments and audits to identify and remediate vulnerabilities and ensure compliance with regulatory requirements.
• Monitor cloud infrastructure and applications for security incidents, and respond promptly to security alerts and breaches.
• Conduct threat modeling and risk assessments to proactively identify potential security threats and develop mitigation strategies.

Qualifications:

• GIAC Security Leadership Certification (GSLC) AND Certified Information Security Manager CISM AND CompTIA Cybersecurity Analyst (CySA+) certifications

-OR-

• Certified Information Systems Security Professional (CISSP) AND CompTIA Cybersecurity Analyst (CySA+) certifications
• AWS GovCloud experience
• At least 5+ years of experience within DevSecOps or cloud engineering roles with a strong focus on security.
• Hands-on experience with AWS GovCloud services and security controls.
• Proficiency in scripting languages such as Python, Shell, or PowerShell for automation and orchestration.
• Strong understanding of networking concepts and protocols, including TCP/IP, DNS, and VPN.
• Experience with containerization technologies such as Docker and orchestration tools like Kubernetes.
• Excellent problem-solving skills and attention to detail, with a commitment to delivering high-quality solutions in a fast-paced environment.
• Effective communication skills, with the ability to articulate complex technical concepts to both technical and non-technical stakeholders.