Senior Secure DevOps Engineer

Amentum•Richmond, VA

19h•Onsite

About The Position

Amentum is a global leader in advanced engineering and innovative technology solutions, trusted by the United States and its allies to address their most significant and complex challenges in science, security and sustainability. Headquartered in Chantilly, Virginia, we have approximately 50,000 employees in more than 70 countries across all 7 continents. We are seeking a highly skilled Senior Secure DevOps Engineer to join our team and play a critical role in building and maintaining secure and efficient software development and operations workflows. The ideal candidate will be a collaborative team player with expertise in DevOps practices, cybersecurity, and cloud technologies. As a Secure DevOps Engineer, you will ensure that our development pipelines are secure by design, adhere to compliance standards, and deliver robust solutions for high-performance and scalable systems.

Requirements

Proficiency in scripting and development (e.g., Python, Bash, or Go) for automation.
Thorough understanding of containerization and orchestration technologies (e.g., Docker, Kubernetes).
Knowledge of application security principles, including OWASP Top 10 and security testing methods.
Familiarity with version control tools like Git and Git workflows.
Excellent problem-solving, collaboration, and communication skills.
Bachelor’s degree in Computer Science, Engineering, Information Technology, or equivalent practical experience.
Typically, 5 years of hands-on experience in DevOps engineering, with a strong focus on security.
Experience with CI/CD tools (e.g. DevOps CI/CD, GitHub Actions etc.)
Strong hands-on experience with cloud service providers (e.g., Azure, or GCCHP).
Hands-on experience with Infrastructure as Code (IaC) tools such as Terraform, CloudFormation, or Ansible.
Experience with integrating security tools into DevOps workflows, such as vulnerability scanners, and security monitoring tools.

Nice To Haves

Certifications such as Azure Certified DevOps Engineer , Certified Kubernetes Administrator (CKA), or Certified Information Systems Security Professional (CISSP).
Experience implementing Zero Trust Architecture or securing microservices and APIs.
Familiarity with compliance frameworks (e.g., SOC 2, ISO 27001, PCI-DSS, GDPR).
Practical experience with tools like Azure Key Vault for secrets management.
Contributions to or involvement in open-source security or DevOps projects.

Responsibilities

Design, implement, and maintain secure CI/CD pipelines to support DevOps workflows.
Work closely with development, operations, and security teams to integrate security tools and best practices into the software development lifecycle.
Automate infrastructure deployment using Infrastructure as Code (IaC) while maintaining security and scalability.
Develop and enforce security policies and ensure continuous monitoring of vulnerabilities and risks in the systems.
Manage and secure cloud infrastructure (Azure, or GCCH) to optimize performance and compliance.
Collaborate with the security team to perform threat modeling and risk assessments, and address identified vulnerabilities.
Monitor systems, logs, and events to detect security threats, misconfigurations, and other operational or security issues.
Stay current with industry trends in DevSecOps tools, cloud security, and cybersecurity practices.
Create technical documentation and workflows for DevOps processes and security implementations.
Provide mentorship and promote secure DevOps best practices across development and operations teams.
Perform other duties as assigned.