DevSecOps Engineer

Integrated Solutions for Systems•Auburn, AL

23h•Onsite

About The Position

Integrated Solutions for Systems (IS4S) is seeking a DevSecOps Engineer in Auburn, AL to assist development enabling Command and Control (C2), Fires, and Electromagnetic Warfare (EW) technologies for the DoD. The person or persons filling this position will integrate into an existing, multi-disciplinary team to create, develop, integrate, and deploy solutions used by warfighters. The challenges facing our nation are constantly evolving. Therefore, we are looking for self-driven, entrepreneurial team members willing and able to constantly learn, adapt, and find ways to develop and integrate solutions. Selected applicants will be expected to gain familiarity with the underlying domain (e.g., EW, Fires) and its role in the larger system of systems to incorporate warfighter needs throughout the solution. They will be given freedom to solve problems and develop solutions with the expectation of owning their tasks and responsibilities. They will also integrate into an existing team that provides support and to ensure designs and solutions conform to and enhance the end product.

Requirements

Bachelor’s degree or higher in engineering, computer science, or related technical field (for full-time applicants)
In pursuit of a Bachelor’s degree or higher in engineering, computer science, or related technical field (for part-time applicants)
Experience developing, testing, and delivering applications within a DevSecOps framework including proficiency with common platforms and environments such as GitLab, AWS, Azure, etc.
Experience with software deployment processes, including packaging, configuration, and release to production or test environments
Experience with SAST, DAST, SCA, and DCA
Ability to understand CVEs, develop and implement mitigations, and communicate false positives
Understanding of containerization and containerized deployment (e.g., Docker, Rancher, Kubernetes, etc.)
Experience with programming and scripting languages (e.g., C++, Go, Bash, Java, Javascript)
Understanding of Unix system administration
Ability to work independently, take initiative, and manage tasks with minimal direction
Must be able to travel to support customer engagements, integration and testing in live environments, occasionally working non-standard hours to match exercise schedules
Must be able to lift and carry computing and networking equipment in support of transit and installation
Possess strong written and verbal communication skills
US Citizenship is required

Nice To Haves

In-depth knowledge of NIST 800, CMMC, DoD DISA IL-4/5/6
Knowledge of authentication and authorization protocols (e.g., SAML, OAuth, OIDC) and access control methods (PKI, MFA, ABAC)
Understanding of the operational requirements for systems functioning in DIL/Tactical Edge environments
In-depth knowledge of containerized deployment using Kubernetes and Helm
Familiarity Apollo and Rubix
Exposure to distributed systems, microservices architectures, or high-availability systems
Experience with Mission Command or C2 systems, especially those dealing with Fires and Electromagnetic Warfare

Responsibilities

Assisting with architecture, design, development, integration, testing, and deployment
Creating pipelines to automate testing and deployment
Maintaining a strong cybersecurity posture while incorporating modern development tools and practices
Identifying vulnerabilities, real or perceived, adjudicating them, and either explaining false positives or developing a Plan of Action and Milestones (POAM)
Integrating security and compliance into products, including encryption, access management, and system logging
Adhering solutions to DoD Security Technical Implementation Guides (STIGs)
Develop and maintain cybersecurity artifacts (scan results, POAMs, SBOMs, system diagrams, etc.)
Communicating and interacting with customers, stakeholders, and other companies