DevSecOps Engineer

Avalore, LLC•Arlington, VA

41d•$97,000 - $192,000•Onsite

About The Position

The DevSecOps Engineer will maintain and operate the WDP DevSecOps factory and its associated automated pipelines. This person will integrate security into every phase of the software lifecycle, manage the continuous integration and continuous deployment (CI/CD) processes, and ensure that the development factory, processes, and documentation are secure and efficient. This person will design and implement CI/CD pipelines using tools like Jenkins, GitLab CI, or GitHub Actions, automate build, test, and deployment processes to increase reliability and efficiency, and implement infrastructure as code practices for consistent environments. This person will integrate security scanning tools into the CI/CD pipeline, implement automated quality gates to prevent insecure code from being deployed, and establish monitoring and alerting for pipeline health and performance. This person will manage source code repositories and branching strategies, implement artifact management and versioning, and establish deployment strategies such as blue-green or canary deployments. This person will collaborate with development, security, and operations teams to optimize the software delivery lifecycle, document pipeline configurations and processes, and continuously improve the DevSecOps practices based on metrics and feedback.

Requirements

SECRET Security Clearance Required
Applicants must be currently authorized to work in the United States on a full-time basis.
Professional proficiency in English is required.
Demonstrated proficiency in using all Microsoft Office applications.

Nice To Haves

Cloud+, GICSP, GSEC, Security+, or SSCP certifications (Junior / Journeyman roles)
SecurityX/CASP+,CCNP Security, CCSP,FITSP-O, or GFACT (Senior roles)

Responsibilities

Maintain and operate the WDP DevSecOps factory and its associated automated pipelines.
Integrate security into every phase of the software lifecycle.
Manage the continuous integration and continuous deployment (CI/CD) processes.
Ensure that the development factory, processes, and documentation are secure and efficient.
Design and implement CI/CD pipelines using tools like Jenkins, GitLab CI, or GitHub Actions.
Automate build, test, and deployment processes to increase reliability and efficiency.
Implement infrastructure as code practices for consistent environments.
Integrate security scanning tools into the CI/CD pipeline.
Implement automated quality gates to prevent insecure code from being deployed.
Establish monitoring and alerting for pipeline health and performance.
Manage source code repositories and branching strategies.
Implement artifact management and versioning.
Establish deployment strategies such as blue-green or canary deployments.
Collaborate with development, security, and operations teams to optimize the software delivery lifecycle.
Document pipeline configurations and processes.
Continuously improve the DevSecOps practices based on metrics and feedback.