DevSecOps Engineer

Core4ce Careers • Hanahan, SC

2d • Onsite

About The Position

Core4ce is hiring a Senior DevSecOps Engineer to support a large, secure Department of War (DoW) Security Operations Center (SOC). This hands-on engineering role is responsible for engineering, automating, securing, maintaining, and troubleshooting SOC systems, and integrating subscribers with SOC services and supporting technologies. The engineer will work across Kubernetes and other container technologies, Infrastructure as Code (IaC), CI/CD, Linux, cloud, automation, networking, security, identity, and application workloads.

The position involves working directly with application and subscriber support teams and subscribers to understand requirements, resolve technical issues, and help implement SOC tools. As a senior member of the engineering team, the successful candidate will provide advanced technical input and mentor less experienced engineers. The role is required to be performed on-site in a secured DoW facility. Responsibilities may evolve to meet business needs and support individual growth.

Requirements

• Active Top Secret/SCI security clearance or Interim Secret clearance with the ability to obtain a TS-SCI clearance.
• At least five years of demonstrated hands-on experience engineering, administering, and troubleshooting Linux systems, preferably Red Hat Enterprise Linux (RHEL).
• Demonstrated experience with Kubernetes environments, including installation, configuration, operation, upgrades, troubleshooting, and maintenance of development, staging, and/or production environments.
• Demonstrated experience developing and maintaining Infrastructure as Code using technologies such as Terraform.
• Demonstrated experience with configuration management and infrastructure automation using technologies such as Terraform and Ansible.
• Strong understanding of network protocols and services, with hands-on experience troubleshooting networks across virtualized and data center environments.
• Strong hands-on experience designing, maintaining, and troubleshooting CI/CD pipelines.
• Experience with Git-based development workflows and platforms such as GitLab.
• Strong understanding of containers, container images, container registries, and container lifecycle management.
• Strong understanding of Kubernetes concepts, including networking, ingress, DNS, storage, RBAC, certificates, secrets, resource management, workload scheduling, deployments, services, and cluster operations.
• Demonstrated ability to troubleshoot complex technical issues across multiple layers of infrastructure and software.
• Experience with cloud infrastructure and services, preferably Amazon Web Services (AWS).
• Experience with virtual infrastructure applications, preferably VMware vSphere.
• Experience implementing or supporting security controls and automated security testing within DevSecOps environments.
• Demonstrated experience working directly with customers or application teams to gather requirements, troubleshoot issues, and develop technical solutions.
• Strong written and verbal communication skills, including the ability to communicate complex technical issues to technical and non-technical audiences.
• Demonstrated ability to mentor engineers and provide technical guidance to team members.

Nice To Haves

• Significant hands-on engineering and administration experience with Red Hat OpenShift.
• Experience migrating Kubernetes platforms and application workloads to Red Hat OpenShift.
• Experience with Rancher and RKE2 Kubernetes environments.
• Experience operating Kubernetes/OpenShift workloads within AWS, including AWS GovCloud.
• Experience with GitLab Ultimate and enterprise CI/CD environments.
• Experience with container and DevSecOps technologies such as Harbor, Trivy, Red Hat Advanced Cluster Security (RHACS), HashiCorp Vault, and Artifactory.
• Experience implementing or supporting SBOMs, preferably using CycloneDX, and software supply-chain security practices.
• Experience with observability and monitoring technologies such as Prometheus, Grafana, Splunk, and OpenTelemetry.
• Experience with identity and access management technologies such as Keycloak.
• Experience with container registries, artifact repositories, vulnerability scanning, image promotion, and secure software delivery practices.
• Experience with F5/NGINX, AppProtect, and Palo Alto.
• Experience with MySQL and PostgreSQL database management.
• Familiarity with Zero Trust principles and their application to cloud-native applications and workloads.
• Experience working within a DoD, federal government, healthcare, or other highly regulated environment.
• Experience navigating DoD cybersecurity, network, access, authorization, and accreditation requirements.
• Experience supporting platform modernization or large-scale Kubernetes/OpenShift migration initiatives.
• Experience working in a DevOps or DevSecOps environment using Agile methodologies.
• Certifications such as Red Hat Certified System Administrator (RHCSA), Red Hat Certified Engineer (RHCE), or CompTIA Linux+.

Responsibilities

• Engineer, administer, maintain, upgrade, secure, and troubleshoot enterprise Kubernetes and Red Hat OpenShift environments supporting development, staging, and production workloads.
• Develop and maintain Infrastructure as Code and configuration automation using technologies such as Terraform and Ansible/Ansible Automation Platform.
• Design, develop, maintain, and troubleshoot CI/CD pipelines for automated software builds, testing, security scanning, artifact management, and deployment.
• Troubleshoot complex issues spanning Kubernetes/OpenShift, Linux, cloud infrastructure, networking, DNS, certificates, authentication, storage, containers, CI/CD pipelines, and application workloads.
• Work directly with customers and application teams to understand technical requirements, identify pain points, evaluate solutions, and resolve platform and application deployment issues.
• Implement and support security throughout the delivery lifecycle, including vulnerability scanning, container security, secrets management, artifact security, software supply-chain security, and Software Bills of Materials (SBOMs).
• Support vulnerability remediation, system hardening, cybersecurity compliance, and authorization/accreditation activities.
• Support container registries, artifact repositories, identity and access management, security scanning, and related DevSecOps platform services.
• Monitor and optimize system resources, including performance, capacity, availability, serviceability, and recoverability.
• Develop and maintain technical documentation, system administration procedures, troubleshooting guides, engineering standards, and standard operating procedures.
• Participate in system architecture, platform modernization, and technology evaluation efforts.
• Provide technical guidance, mentoring, knowledge sharing, and troubleshooting assistance to other engineers.
• Participate in technical and code reviews and help establish engineering standards and best practices across the team.
• Collaborate with cloud, infrastructure, networking, cybersecurity, application development, and customer teams to resolve cross-disciplinary issues.
• Perform engineering and support duties on-site in a secured DoW facility.

Benefits

• 401(k) with 100% company match on the first 6% deferred, with immediate vesting.
• Comprehensive medical, dental, and vision coverage, with the employee portion paid 100% by Core4ce.
• Unlimited access to training and certifications, with no pre-set cap on eligible professional development.
• Tuition assistance for job-related degrees and courses.
• Paid parental leave.
• PTO that grows with tenure.
• Generous holiday schedules.
• Opportunity for employees to propose innovations through The Forge, with internal backing.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed