DevSecOps Engineer
Description

Clearance Required: Top Secret (TS) with Poly


Are you passionate about nurturing environments and enabling growth in others? Do you thrive in teaching and fostering knowledge while bringing modern software engineering solutions to life? Equilibrium Technologies, LLC, is looking for a dedicated Platform Engineers specializing in DevSecOps and Continuous Integration/Continuous Delivery (CI/CD) pipelines to join our transformative team. 


We design, develop, and deliver transformative digital solutions that enable government agencies to modernize faster and improve human experiences. Our primary company elements revolve around Empower, Create, Thrive for our employees. We are dedicated to fostering an environment where our team can flourish, innovate, and make meaningful contributions to national security. 

Requirements

 Mentorship and Training:

  • Mentor and guide team members on DevSecOps best practices and tools.
  • Conduct training sessions to upskill team members and promote a culture of continuous learning.
  • Foster a collaborative environment to enhance communication and efficiency across teams.

Design and Engineering of CI/CD Pipelines:

  • Architect, implement, and maintain robust Continuous Integration and Continuous Delivery pipelines.
  • Ensure the pipelines are scalable, secure, and efficient, supporting multiple development teams and applications.

Automation and Infrastructure Management:

  • Develop and manage infrastructure automation using Infrastructure-as-Code (IaC) tools like CloudFormation and Ansible.
  • Automate deployment processes to improve efficiency and reduce manual intervention.

Collaboration and Integration:

  • Work closely with development, operations, and security teams to integrate security best practices into the CI/CD pipelines.

Tool Management and Optimization:

  • Manage and optimize DevSecOps tools including GitHub, Jenkins, Sonatype IQ, and Nexus.
  • Stay updated with the latest tool advancements and integrate new technologies to improve the CI/CD processes.

Containerization and Orchestration:

  • Implement and manage containerized applications using Kubernetes.
  • Ensure efficient orchestration of containers, optimizing resource usage and scaling as needed.
  • Utilize containers to operate build jobs in isolation, ensuring environment consistency and improving build reliability.
  • Develop strategies for container deployment and management to enhance the CI/CD pipeline efficiency.

Monitoring and Troubleshooting:

  • Monitor the health and performance of CI/CD pipelines and infrastructure.
  • Troubleshoot and resolve issues promptly to minimize downtime and disruptions.

Security and Compliance:

  • Embed security practices within the CI/CD pipeline to ensure compliance with industry standards.
  • Implement and maintain a Zero Trust Architecture to enhance security.
  • Conduct regular security audits and implement necessary changes to enhance security posture.

Documentation and Reporting:

  • Maintain comprehensive documentation of CI/CD pipelines, automation scripts, and configurations.
  • Generate reports on pipeline performance, deployment metrics, and security compliance for stakeholders.
  1. Federal and Commercial Guidance:
    • Keep up to date with federal directives, including Executive Order (EO) 14110.
    • Ensure that all CI/CD processes and infrastructure comply with federal requirements and guidelines.
    • Align CI/CD processes with NIST SP 800-218 standards and implement necessary changes to maintain compliance.
    • Integrate secure development practices from NIST SP 800-218 into the software development lifecycle to reduce vulnerabilities and mitigate their impact.

Required Experience:

  • 10+ years of experience in the DevSecOps field.
  • Proficient in software frameworks such as Java, Spring, and Node.js.
  • Demonstrated experience with GitHub, Jenkins, Sonatype IQ, and Nexus.
  • Experienced with Infrastructure-as-Code (IaC) applications such as CloudFormation and Ansible.
  • Familiarity with Kubernetes and containerization technologies.
  • Knowledgeable of cloud services, specifically Amazon Web Services (AWS).

Desired Skills:

  • Strong leadership skills.
  • Excellent problem-solving abilities.
  • Highly organized.
  • Strong written and verbal communication skills.
  • Ability to work independently and in a team.
  • Passionate about teaching and growing other skills.
  • Enjoys modern IT and modern software application architecture.

Software Frameworks and Technologies:

  • Java
  • Spring
  • Node.js

Scripting Languages:

  • Python
  • Bash
  • Shell scripting

Container-based Technologies:

  • Docker
  • Kubernetes

DevSecOps Tools:

  • GitHub
  • Jenkins
  • Sonatype IQ
  • Nexus

Cloud Services:

  • Amazon Web Services (AWS)

Education:

  • Bachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent experience).

Certifications:

  • Relevant certifications such as AWS Certified Solutions Architect, Certified Kubernetes Administrator (CKA), or similar are a plus.