DevSecOps Engineer

Na Alii is seeking a DevSecOps Engineer to support the secure delivery and operation of a software solution for a Department of the Navy organization and serve as a team member of Nakupuna Labs the in-house innovation team. The ideal candidate has advanced experience in designing implementing administering and continuously improving CI/CD pipelines deployment environments and integrated security controls.

The following reflects managements definition of essential functions for this job but does not restrict the tasks that may be assigned.

• Designing implementing and administering CI/CD pipelines that automate build test security scanning approval release rollback and deployment activities across development test and production environments.
• Integrating and maintaining automated security controls including static and dynamic application security testing software composition analysis secrets scanning container and infrastructure-as-code scanning and policy-based quality gates.
• Administering source code and artifact repositories pipeline runners or agents deployment credentials certificates secrets and role-based access in accordance with least-privilege principles.
• Automating infrastructure provisioning and configuration to create repeatable hardened and Security Technical Implementation Guide (STIG)-aligned environments and configuration baselines.
• Managing containerized application build and deployment processes and where applicable orchestration platforms registries software bills of materials and signed artifacts.
• Monitoring pipeline and platform availability performance and security events; troubleshooting build and deployment failures; and coordinating patching incident response and vulnerability remediation.
• Maintaining release records system diagrams operating procedures security evidence and Risk Management Framework (RMF) authorization artifacts; supporting control assessments remediation activities and continuous monitoring.
• Collaborating with developers testers cybersecurity personnel infrastructure teams and customer stakeholders to translate delivery and security requirements into automated controls and improve reliability delivery speed and auditability.
  

The ideal candidate has experience with the following technical knowledge skills and abilities:

• Hands-on experience designing and administering production CI/CD pipelines using tools such as GitLab CI/CD GitHub Actions Azure DevOps or Jenkins including Git workflows release management and artifact repositories.
• Experience with containers and orchestration technologies such as Docker and Kubernetes and with infrastructure-as-code or configuration-management tools such as Terraform Bicep CloudFormation or Ansible.
• Experience administering Azure AWS or on-premises environments including Linux or Windows systems networking identity and access management certificates and secrets.
• Ability to automate operational tasks using PowerShell Bash Python or a comparable scripting language.
• Working knowledge of secure software delivery practices vulnerability management STIGs DoD RMF NIST SP 800-53 controls security evidence collection and authorization support.
• Strong troubleshooting documentation communication and collaboration skills including the ability to work effectively with technical teams and customer stakeholders.
• Desired Certifications:
  • One or more relevant certifications such as Security CE CySA CISSP CSSLP GSEC or a cloud DevOps or Kubernetes security credential.

Education and Experience:

This position requires a Bachelors degree in computer science information technology cybersecurity engineering or a related field and at least 5 years of relevant professional experience.

Clearance:

This position requires an active Secret security clearance. Must be a U.S. citizen.

Physical Requirements: The ideal candidate must at a minimum be able to meet the following physical requirements of the job with or without a reasonable accommodation:

• Ability to perform repetitive motions with the hands wrists and fingers.
• Ability to engage in and follow audible communications in emergency situations.
• Ability to sit for prolonged periods at a desk and working on a computer.

The Nakupuna Companies use a market-based compensation strategy to ensure that our employees are compensated within applicable market ranges commensurate with multiple factors including but not limited to the individuals particular combination of education knowledge skills competencies and experience as well as contract-specific affordability organizational requirements and position location. The projected compensation range for this position is $13000 to $160000 (annualized USD). The salary range displayed represents the typical salary range for this position and is just one component of Nakupuna Companies total compensation package for employees.