Senior DevSecOps Engineer
About The Position
CommandIQ® is seeking an experienced DevSecOps Engineer to manage the integration of cybersecurity principles and safety checks into the overarching CIQ software development process. In this role, you will integrate and maintain automated security scanning tools into the existing CIQ CI/CD Pipeline, identify and help remediate vulnerabilities in the current CIQ product as well as CIQ related infrastructure, assist in refining plans for CIQ deployments to identify potential risks and vulnerabilities prior to major CIQ delivery milestones, work with agile software development teams to understand important cybersecurity related design concepts prior to feature implementation, and assist leadership in developing overarching CIQ security strategies and controls. CommandIQ® is a geographically dispersed project team that executes in an agile – scrum setting. The team readily adapts to changing priorities as new information is discovered and project milestones shift to meet the various stakeholder needs. It has the opportunity to be fast-paced environment but also presents a highly-desirable opportunity for team members to gain exposure to various subject areas and hone their technical skills across various tools and frameworks. Additionally, team members have the ability to interface with an array of different customer groups and present thoughtful solutions to meet the various customer/stakeholder needs. If the desire to succeed in an actively changing and complex problem space excites you, CommandIQ® is the place to be!
Requirements
- Experience building, maintaining, and automating CI/CD pipelines with GitLab CI/CD
- Experience with containerization and orchestration (Docker, Kubernetes)
- Experience with Linux-based development environments
- Experience with scripting (Python, Bash, PowerShell)
- 3+ years of relevant work experience (Advanced Degree may be substituted for 2 years of experience)
- Must be a US Citizen for consideration due to security clearance requirements.
Nice To Haves
- Exposure to maintaining a Zero Trust Architecture model
- Experience implementing and maintaining various types of access control (role-based, attribute-based, claims-based)
- Experience in a Full-stack engineering role
- Experience in Agile Methodologies and Tools
- Previous IRAD Experience
- Certified DevSecOps Professional (CDP) Certification
- Active Secret Clearance
Responsibilities
- Integrate and maintain automated security scanning tools into the existing CIQ CI/CD Pipeline
- Identify and help remediate vulnerabilities in the current CIQ product as well as CIQ related infrastructure
- Assist in refining plans for CIQ deployments to identify potential risks and vulnerabilities prior to major CIQ delivery milestones
- Work with agile software development teams to understand important cybersecurity related design concepts prior to feature implementation
- Assist leadership in developing overarching CIQ security strategies and controls
Benefits
- Medical
- Dental
- Vision
- Life Insurance
- Short-Term Disability
- Long-Term Disability
- 401(k) match
- Flexible Spending Accounts
- EAP
- Education Assistance
- Parental Leave
- Paid time off
- Holidays
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
