Staff / Sr Staff DevSecOps Engineer

SciTec•Boulder, CO

1d•Onsite

About The Position

SciTec, a subsidiary of Firefly Aerospace, is seeking experienced Staff and Senior Staff DevSecOps engineers. SciTec is a defense contractor that develops advanced technologies for U.S. National Security and Defense, focusing on areas like missile defense, intelligence, surveillance, and reconnaissance, space domain awareness, and aircraft survivability. This role involves managing the integration, security scanning, and deployment of multiple applications into orchestrated frameworks, working with deployment teams to orchestrate deployments across various environments, and maintaining CI/CD pipelines. The position requires a strong understanding of containerization, Kubernetes, and cybersecurity protocols. Note that this role requires U.S. citizenship due to government contracts and the need for security clearances.

Requirements

At least two years of professional experience building and executing DevOps or DevSecOps solutions using Continuous Integration / Continuous Deployment (CI/CD).
Strong experience designing and developing application container deployment solutions using Docker, docker-compose, Kubernetes, etc.
Experience with Amazon Elastic Kubernetes Service (EKS)
Experience with Istio service mesh as well as Prometheus and Grafana
Strong experience maintaining deployment environments for development, test and production
Experience with authentication technologies, such as Keycloak
At least one year of professional experience using Python3
At least one year of professional experience using Linux operating systems
A bachelor’s degree in computer science, engineering, mathematics, or physical sciences
The ability to obtain and maintain a DoD security clearance
Ability to work 100% on-site
Detail oriented
Good verbal and written communication skills

Nice To Haves

Strong experience with software vulnerability scanning with static and dynamic code analysis
Experience with software vulnerability assessment and remediation using SAST/DAST and tools like Sonarqube
Strong experience with software package artifact management using JFrog Artifactory, Nexus or similar
Development experience in Python, C++
Experience with container security tools such as Grype, Syft
Experience with version control using Git
Systems and service administration in a Linux environment, including the installation and maintenance of applications supporting CI/CD like Gitlab, etc

Responsibilities

Manage integration, security scanning, and deployment of multiple applications into orchestrated frameworks.
Work with deployment teams to orchestrate deployments to development, test, and operational environments.
Create, maintain, and improve Continuous Integration (CI) pipelines in gitlab-ci.
Monitor CI pipelines for performance and resolve observed or reported issues.
Implement and maintain version promotion of one or more applications within CI pipelines.
Integrate CI pipelines with development tools for artifact management, software test, software quality assessment, etc.
Implement Continuous Delivery and execute automated or manual deployments of applications into orchestrated k8s environments.
Execute checkout and troubleshooting of deployed applications within development and production environments.
Execute software release processes including release branch creation, integration, checkout and test.
Implement and maintain Helm charts.
Ensure cybersecurity protocols are followed.
Other duties as assigned.