Senior Security DevOps Engineer

Accenture Federal Services•Tampa, FL

21h•$133,600 - $185,100

About The Position

At Accenture Federal Services, our purpose is to help the US federal government make the nation stronger and safer, and life better for people. We are a technology company within global Accenture, with over 13,000 employees dedicated to leveraging technology and ingenuity for clients across defense, national security, public safety, civilian, and military health organizations. Recognized as a Glassdoor Top 100 Best Place to Work, we foster a collaborative and caring community that empowers growth through hands-on experience, certifications, and industry training. Join us to drive positive, lasting change and advance missions for the government. AFS is currently seeking a highly skilled and experienced Senior Security DevOps Engineer. The ideal candidate will possess a deep understanding of implementing security measures to protect computer systems and networks, with a strong foundation in security pipeline automation and containerization technologies. Proficiency in applying DISA Security Technical Implementation Guides (STIGs) and operating within applications and data is essential. The successful candidate will have a proven track record of designing and implementing security solutions in both on-premises and cloud environments, and will collaborate effectively with IT professionals to ensure system and data security.

Requirements

Bachelor’s Degree or equivalent experience and minimum 8 years prior relevant experience, or Masters Degree in a related field and minimum 5 years of experience.
Solid understanding of Linux/Unix Administration.
Experience with containerization and orchestration technologies, particularly Docker and Kubernetes.
Proficient in one or more computer programming languages commonly used in scripting & automation (e.g., Bash, Python, Go, or Rust).
Proficient in applying DISA STIGs within cloud and containerized environments.
Demonstrated experience in automating deployments and developing infrastructure as code (IaC).
Strong background in DevOps practices and tools, including Jenkins, Git, Ansible, and Terraform.
Possess and maintain relevant DoD 8570/8140 IAT level II.
An active TS/SCI is required.

Nice To Haves

Direct experience with Elasticsearch, Kibana (ELK) Stack deployment and maintenance to include fleet and agent setup.
AWS Elastic Kubernetes Service (EKS) experience.
Gitlab CI/CD pipeline engineering experience.
Familiarity with one or more of Java/Kotlin/NPM programming languages.
Excellent problem-solving skills and the ability to work in a fast-paced, evolving environment.
Effective communication skills, both written and verbal, with the ability to present technical information to a non-technical audience.
Preferred candidate has a background in incident response and/or DevSecOps.

Responsibilities

Design, deploy, and manage security solutions (Scanning, IDS/IPS, NIDS/NIPS, SIEM) in cloud environments as well as cloud air-gapped environments.
Empower developers and data scientists to move fast while championing security at the start, understand friction points and implement solutions.
Ensure appropriate measures are implemented for secure application development and supply chain protection.
Research and recommend technical solutions to various controls by understanding NIST 800-53 Risk Management Framework (RMF) and CNSSI 1253 & assist in developing policies, procedures and guidelines.
Lead the effort in closing out Plan of Action & Milestones (POA&M) items that are associated with technology-related control items and findings.
Implement security solutions within container orchestration technologies such as Docker and Kubernetes.
Conduct risk assessments and vulnerability assessments via implementing CI jobs to scan for various security defects such as SAST, DAST & container scanning.
Apply DISA STIGs to ensure compliance with security standards and policies.
Collaborate with other IT professionals to ensure that security is integrated into all aspects of the organization's IT infrastructure.
Stay abreast of latest security threats, tools and techniques and recommend defense in depth strategies to mitigate risk to the organization.
Provide mentorship and guidance to the team on cybersecurity best practices and basic cyber hygiene.