DevSecOps Engineer

Interactive Process Technology LLC•Huntsville, AL

2d•Onsite

About The Position

IPTA is seeking a DevSecOps Engineer to support a rapidly growing program developing a cloud native product for a government customer. The ideal candidate will drive how the product deploys, verifies, and monitors applications and services. This person will interface with internal/external stakeholders to ensure the DevSecOps processes and pipelines remain functional. This role also will assist in the ongoing improvement of Continuous Improvement/ Continuous Development (CI/CD) environment provisioning and development workflows for the government product.

Requirements

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Software Engineering, or related field.
Minimum 10 years of enterprise IT experience.
Minimum 5 years supporting DevOps or DevSecOps environments.
Experience implementing enterprise CI/CD platforms.
Experience supporting hybrid cloud environments.
Experience automating infrastructure deployments.
Experience securing Kubernetes and container platforms.
Active Security Clearance Required

Nice To Haves

DoD 8570 Level II/III certification desired
Experience with tools such as Jira, Azure DevOps, Git, and CI/CD platforms.
Experience in interpreting data and presenting analysis and recommendations to management.
Experience deploying and securing containers.
Experience utilizing Terraform.
Deep understanding of cloud technologies (e.g., AWS, Azure, GCP, Oracle) and hybrid cloud environment.
Proficiency in multiple scripting and programming languages (Python, Java, Bash, Go).
Hands-on experience with infrastructure automation tools.
Experience with agile methodologies and DevSecOps practices.
Experience with relevant technologies and tools like SIEM systems, firewalls, VPNs, data encryption, cloud platforms (AWS, Azure, Google Cloud), and endpoint protection.
Ability to work both independently and within a team.
Experience designing, implementing, and maintaining CI/CD pipelines using GitLab CI/CD, GitHub Enterprise, Azure DevOps, Jenkins, or similar platforms.
Experience implementing Infrastructure as Code (IaC) using Terraform, Ansible, CloudFormation, or comparable automation tools.
Experience deploying, managing, and securing containerized applications using Docker and Kubernetes platforms such as OpenShift or VMware Tanzu.
Experience deploying and supporting cloud platforms, including Microsoft Azure, Amazon Web Services (AWS), VMware Cloud Foundation (VCF), or Government Cloud environments (IL5/IL6).
Experience implementing GitOps methodologies using tools such as Argo CD and Helm.
Experience integrating DevSecOps security tools, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), container image scanning, and secrets management.
Experience with source code management and version control using Git-based repositories, including GitLab, GitHub Enterprise, Azure Repos, or Bitbucket.
Experience implementing enterprise monitoring, logging, and observability solutions using Prometheus, Grafana, Elastic Stack, OpenTelemetry, or similar technologies.
Experience developing technical documentation, standard operating procedures (SOPs), architecture diagrams, and implementation guides.
AWS Certified DevOps Engineer - Professional
Certified Kubernetes Administrator (CKA)
Certified Kubernetes Security Specialist (CKS)
CompTIA Security+

Responsibilities

Provide leadership in Development, Security, and Operations (DevSecOps) areas of incident response, vulnerability scanning and management, problem management, certificate management, penetration testing, password policy management, data analysis of network security, remediation patching coordination, and compliance efforts.
Design, develop, and maintain enterprise CI/CD pipelines.
Automate application build, testing, deployment, and rollback processes.
Develop reusable pipeline templates and standardized deployment workflows.
Optimize pipeline performance, reliability, and scalability.
Troubleshoot and resolve CI/CD pipeline failures and deployment issues.
Develop and maintain Infrastructure as Code (IaC) using Terraform, Ansible, or similar technologies.
Automate provisioning of compute, storage, networking, and Kubernetes infrastructure.
Maintain infrastructure documentation and automation standards.
Integrate security controls throughout the Software Development Lifecycle (SDLC).
Implement Static Application Security Testing (SAST) solutions.
Implement Dynamic Application Security Testing (DAST) solutions.