DevSecOps Engineer (Mid)

Entarian•Remote,

22h•$120,000 - $135,000

About The Position

Entarian is seeking a DevSecOps Engineer to support the design and engineering of a DevOps platform for a shared system of systems. The platform will support software development, systems engineering, integration, and testing of software applications and infrastructure in a heterogeneous environment for the United States Navy, with a strong focus on automation and DevSecOps. The role develops CI/CD pipelines and reusable infrastructure-as-code configurations, automates Kubernetes configurations, supports cloud networking, and maintains and hardens base images. It also contributes to risk assessments and mitigation recommendations, validates Information Assurance Controls and procedures under applicable DoD and NIST guidance, and performs troubleshooting and documentation for DevSecOps engineering efforts. The engineer documents processes and services for cloud application teams; participates in Agile planning, solution development, and system testing; researches quality-review findings and develops solutions; and uses scripting and automation to manage infrastructure. The role also provides technical assessment inputs on cost, efficiency, and security, develops infrastructure testing procedures and documentation, identifies system improvements, collaborates on customer-facing documentation, and coordinates with project teams to meet policy, quality, and schedule expectations. The position supports the United States Navy and requires quarterly travel, as well as ad hoc travel to technical exchange meetings, primarily in Norfolk, Virginia; San Diego, California; and Charleston, South Carolina. U.S. citizenship and an active interim DoD Secret clearance or specified favorable background investigation status are required.

Requirements

At least six years of experience, including three years in one or more relevant areas such as systems or software requirements, design, development, verification and validation, test and evaluation, integration, build and deployment; systems administration; information assurance; business analysis; integrated development environment tools; or online and end-user documentation for C4ISR systems or other federal agency IT systems. Experience may be concurrent.
At least two years of related IT experience involving DevOps/DevSecOps engineering, CI/CD, build and release, SRE, operations engineering, systems integration engineering, and/or cloud administration.
Experience evaluating or assessing systems in Government Cloud environments using DevSecOps principles and continuous security.
Strong understanding of Infrastructure as Code and preferably hands-on experience with Terraform, AWS CloudFormation, or similar tools.
Experience with Docker and Rancher, Kubernetes, OpenShift, Fargate, or similar container orchestration tools.
Experience in infrastructure automation and DevOps integration.
Experience developing and managing continuous integration and continuous delivery environments.
DoD 8570-compliant certifications (Security+ and OS) to meet privileged-access requirements for MIP; a valid CompTIA Security+ or equivalent certification at minimum DoD 8570.1-M IAT Level II, or ability to obtain it within a reasonable timeframe.
High school diploma or GED and technical training in information technology or software application development.
U.S. citizenship.
Minimum active interim DoD Secret clearance, or favorable T3-equivalent background investigation; a favorable T5-equivalent background investigation must be obtained.
Ability to travel four times per year, once quarterly, and ad hoc to technical exchange meetings as required.

Nice To Haves

Hands-on experience with Jenkins, GitLab, HashiCorp Vault, Argo CD, Red Hat Enterprise Linux, or Amazon EKS.
Strong understanding of and background with DISA STIGs.
Hands-on Terraform experience; the posting describes this as preferred.

Responsibilities

Develop GitLab CI/CD pipelines.
Design, build, and maintain modular, reusable Terraform infrastructure-as-code configurations across cloud platforms such as AWS or similar platforms.
Automate configurations within Kubernetes.
Support cloud networking and routing for DNS, TLS, and ingress/egress.
Maintain and harden base images.
Support development and documentation of cloud risk assessment results and recommendations, including corrective actions and mitigation strategies.
Provide automated and manual validation of Information Assurance Controls and Validation Procedures in accordance with DoD guidelines, CNSSI 1253, and/or NIST 800 publications.
Validate, troubleshoot, and document DevSecOps engineering efforts.
Document processes and services for cloud application development teams.
Participate in Agile processes to develop tasking, describe technical solutions, and test deployed systems.
Research problems identified by quality reviews and develop solutions.
Use scripting and other automation to manage infrastructure.
Provide input to technical assessments of system cost, efficiency, and security posture.
Develop system infrastructure testing procedures, programming, and documentation.
Identify solutions to improve system and product offerings.
Collaborate with technical writers to create customer-relevant documentation.
Coordinate with project work teams to support policy adherence, quality targets, and schedule milestones.
Travel quarterly and attend ad hoc technical exchange meetings as needed.