Senior DevSecOps Engineer

Peraton • Linthicum Heights, MD

75d • $146,000 - $234,000

About The Position

As a Senior DevSecOps Engineer supporting a government customer, you will play a crucial role in safeguarding our nation's digital landscape while shaping our DevSecOps strategy and leveraging cutting-edge technologies to enhance our cybersecurity capabilities. Your responsibilities will encompass a wide range of key areas, including evaluating and configuring security infrastructure systems globally, conducting internal audits to improve system integrity, and establishing frameworks for measuring and quantifying cyber risk. You will work closely with the Information System Security Officer (ISSO) to strengthen security policies and coordinate the maintenance of security toolsets for continuous monitoring. Furthermore, you will be tasked with managing enterprise applications, implementing security controls, and defining standards for builds and deployments to ensure compliance with security policies. As part of Agile development teams, you will automate deployment and infrastructure management, all while monitoring and analyzing cyber events to enhance system efficiency. Your role will also involve system management, troubleshooting security issues, conducting vulnerability assessments, and ensuring compliance with established standards, which are vital for maintaining security integrity and supporting incident response efforts.

Requirements

• Minimum of 14 years with AS/AA; Minimum of 12 years with BS/BA; Minimum of 10 years with MS/MA; Minimum of 7 years with Ph.D.
• A degree in Information Technology, Computer Science, Software Engineering, Information Systems, or Data Science from an ABET or NCAE accredited institution is highly desired.
• Minimum 2-3 years of experience working with cloud platforms (AWS and/or Azure).
• Proven experience leading DevOps/DevSecOps implementations in large programs, particularly in migrating legacy applications and automating systems.
• In-depth knowledge of DevSecOps techniques, including continuous integration, continuous testing, and continuous deployment methodologies.
• Familiarity with intrusion detection methodologies and security systems implementation.
• Conduct regular security scans, analyze results, and implement resolutions.
• Create, maintain, and implement detailed documentation and standard operating procedures.
• Familiarity with multiple operating systems (Windows, Linux, etc.) and at least one Relational Database Management System (RDBMS).
• Ability to think strategically and to work both independently and collaboratively within a small team.
• Active Secret clearance (TS/SCI clearance preferred).

Nice To Haves

• 5+ years of experience with large-scale network design and deployment.
• Experience with CloudFormation and Elasticsearch.
• Basic understanding of an Object-Oriented Programming Language, preferably Java or Python.
• Experience integrating Jenkins and Docker for automated CI/CD pipelines.
• Basic understanding of Kubernetes or OpenShift Container Platform.
• Active IAT Level II certification.
• Global Skill Development Council - Certified DevOps Engineer or a similar certification.
• Experience implementing DevSecOps for large programs using Agile methodologies, preferably SAFe.
• Experience in managing DevSecOps for cloud-based systems within modernization programs.

Responsibilities

• Conduct comprehensive system security and vulnerability analyses to evaluate potential cyber risks, providing actionable insights and recommendations for mitigating identified threats.
• Implement security systems by specifying intrusion detection methodologies and overseeing the installation and calibration of necessary equipment and software.
• Maintain security by consistently monitoring and ensuring adherence to established standards, policies, and procedures.
• Develop and conduct incident response analyses to improve the organization's security posture.
• Establish robust frameworks that facilitate the ongoing measurement and quantification of cyber risk within the organization.
• Develop and conduct training programs aimed at enhancing the cybersecurity awareness of staff members and stakeholders.
• Design, develop, implement, and integrate Information Assurance (IA) architectures and systems or system components for use within computing, network, and enclave environments.

Benefits

• Salary range: $146,000 - $234,000, determined by various factors including experience, education, and geographic location.
• Eligibility for overtime, shift differential, and discretionary bonus in addition to base pay.

What This Job Offers

• Career Level: Senior
• Industry: Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services
• Education Level: Bachelor's degree