RTS DevSecOps Engineer

Lockheed Martin•Boulder, CO

6d•Onsite

About The Position

Lockheed Martin is seeking a skilled level 3 RTS DevSecOps Engineer with a final Secret security clearance to work from our Boulder, CO location. This is an EARLY-MID CAREER (level 3) ROLE where candidates typically require 3+ years of professional experience and a BS degree. The Real-time Transfer Service (RTS) program is developing and implementing the next phase of OPIR Data Distribution system capabilities and services. RTS is a data distribution hub for OPIR ground architecture datatypes and interfaces; the RTS system and its capabilities are expanding to provide greater and enhanced data distribution performance for the OPIR enterprise. We are looking for a Senior DevSecOps Engineer to serve as a technical authority and system matter expert for the RTS engineering team and system. You will be architecting and implementing the "paved road” - a set of secure, automated, and self-service platforms that enable developers to ship code rapidly without compromising security. You will lead high-impact initiatives and foster a "security-by-design" culture across the RTS team.

Requirements

Proficiency with git and version control systems (Github, GitLab)
Experience designing infrastructure as code solutions using tools like Terraform and Ansible
Experience with CI/CD tooling (GitHub Actions, GitLab CI, Jenkins, or similar)
Experience with Linux (RHEL) administration and hardening
Knowledge of virtualization technologies ( VMWare )
Final Secret clearance required for consideration
Must be a US Citizen for consideration

Nice To Haves

Experience with containerization and container security
Experience with Cloud platforms
Knowledge of DevSecOps processes and software supply chain security (SBOMs, signing, verification)
Knowledge of secrets management platforms and software (HashiCorp Vault, SOPS, HSM )

Responsibilities

Containerization and automation of existing and new applications in airgap environments
Identifying and resolving technical challenges through innovative software solution
Working with software developers and engineers to create secure repeatable DevSecOps workflows and patterns
Ensure the success of complex security requirements and compliance for container environments, CI/CD, DevOps, and Infrastructure efforts in classified environments
Documenting infrastructure configurations, processes, and procedures
Automating repetitive tasks to increase efficiency and reduce errors in the image hardening process
Developing best practices to increase the velocity of secure image updates and patch management
Implementing and managing automated compliance scanning tools (SAST/DAST/Fuzzing) within the build pipeline
Implementing Infrastructure as Code (IaC) using Terraform, Ansible or similar tools to stand up secure environments