DevSecOps Engineer
About The Position
As a Salesforce DevSecOps Engineer, you will contribute to Steampunk’s Salesforce and DevSecOps practices, delivering mission-enablement applications on Salesforce. The role calls for experience with cloud platform services, DevOps practices such as build and release management, secure SDLC and DevSecOps practices such as automating security processes in CI/CD pipelines, and general automation. You will help design, implement, and support cloud solutions and processes used by many applications hosted in the company’s environments. You will help develop the Salesforce DevSecOps strategy and practice, collaborate with Salesforce engineering, development, and operations teams, and advise delivery teams on secure software delivery, risk assessments, automation, and tooling. You will support projects through completion, ensure high-quality and documented deliverables, assist application teams with security-tool onboarding and integrations, and contribute to continuous improvement and cross-training. Steampunk describes itself as a change agent in the federal contracting industry, serving Homeland, Federal Civilian, Health, and DoD clients through a human-centered delivery methodology. Applicants are expected to be on camera during interviews and assessments; the company may take a picture to verify identity and prevent fraud. Steampunk is an equal opportunity employer and participates in E-Verify.
Requirements
- Ability to obtain a U.S. government Public Trust Security Clearance.
- Bachelor’s degree in business administration or a technology-related field, or equivalent education-related experience.
Nice To Haves
- At least 5 years of application DevSecOps experience, including active development experience in an Agile environment.
- Hands-on experience integrating Agile software development frameworks such as SAFe with DevSecOps methodologies.
- Working knowledge of Git and repository providers such as GitHub, GitLab, and Bitbucket.
- Experience implementing container and orchestration infrastructure using platforms such as Docker and Kubernetes.
- Working knowledge of automated CI/CD build engines such as Jenkins, GitLab CI/CD, GitHub Pipelines, CircleCI, and TravisCI.
- Experience implementing automated testing frameworks, including Selenium and Salesforce-specific tools such as Provar.
- Hands-on experience integrating Salesforce deployments with industry-standard DevSecOps tooling and orchestration.
- Working knowledge of SalesforceDX, including package-based development models and scratch-org-based development.
- Experience working with teams on complex, multi-tiered, distributed web applications and languages such as Bash, C#, C++, Java, Python, Perl, and PowerShell.
- Excellent written and verbal communication, interpersonal, and collaborative skills, including the ability to communicate information-security topics, policies, standards, and risk concepts to technical and nontechnical audiences at varying organizational levels.
Responsibilities
- Help build the Salesforce DevSecOps strategy and practice, integrating cybersecurity into organizational adoption and improvement of agile practices.
- Partner with Salesforce Engineering team leads to create, implement, and apply DevSecOps principles, processes, and culture for delivery teams.
- Provide subject matter expertise in risk assessments and work in an Agile environment with an understanding of the full software development life cycle.
- Advocate for unit testing, code reviews, full build testing, quality engineering, and requirements-capture practices to improve secure delivery.
- Communicate and ensure the implementation of appropriate security practices within projects.
- Partner with development and operations teams to facilitate automation solutions and custom modules; troubleshoot automation issues and engage resources to find practical solutions.
- Advise on automation and tooling for DevSecOps initiatives with objective, practical, and relevant insights.
- Assist application teams with onboarding to adopted security tools and technologies, working with vendors to troubleshoot platforms and integrations.
- Deliver project tasks and provide technical support through project completion.
- Ensure deliverables meet target time frames, are consistently high quality and documented, and support transition of operational activities.
- Work with teams to continuously improve DevSecOps processes and tools.
- Engineer and implement solutions and recommend continuous improvements to provided services.
- Present regular status updates and provide cross-training to other DevOps team members.
- Evaluate and recommend new technologies for the DevSecOps and Salesforce practices.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
