DevOps Engineer

Job Description

Supporting the planning and implementation of processes and tools to streamline the maturation and deployment of capabilities with integrated security. Assisting in the design, building, and maintenance of secure CI/CD pipelines incorporating automated testing, code quality validation, and vulnerability scanning. Implementing secure provisioning and deployment approaches using containerized solutions (e.g., Docker) and modularization of deployable components. Ensuring compliance with software security standards and frameworks to address vulnerabilities and strengthen protection against threats. Supporting implementation of Software Configuration Management (SCM) tools and practices to ensure code integrity and traceability. Collaborating with cross-functional Agile teams to enforce security policies, monitor CI/CD pipelines, and enhance secure software development lifecycles.

Education: Bachelor's degree in a relevant field (e.g., Computer Science, Software Engineering, or related discipline) with 2 years of related experience, or a Master's degree with 0 years of experience.

Clearance: Active DoD Secret Clearance at the time of application.

• Baseline experience with CI/CD pipelines, automated testing, and DevSecOps best practices.
• Familiarity with one or more programming or scripting languages such as Python, Java, or C++.
• Hands-on proficiency with containerization technologies such as Docker or similar tools.
• Solid understanding of version control systems (e.g., Git) and SCM principles.
• Exposure to Agile frameworks and development practices (e.g., Scrum or Kanban).
• Basic awareness of secure software development principles, such as OWASP standards or integrating security scanning tools.
• Hands-on experience with DevSecOps frameworks, including security automation integrations within CI/CD pipelines.
• Familiarity with container orchestration platforms (e.g., Kubernetes) or experience implementing containerized security practices.
• Practical understanding of security controls like role-based access (RBAC) and secrets management tools.
• Knowledge of Enterprise Service Bus (ESB) technologies such as Kafka or messaging frameworks.
• Familiarity with software testing tools for automated security, functional, and performance verification.
• Experience applying vulnerability management and threat modeling to mitigate risks in the software development lifecycle.