DevSecOps Engineer

Dark Wolfis seeking a DevSecOps Engineer to join our team and play a crucial role in securing our software development lifecycle (SDLC) using automation to support web application deployments. The candidate will be responsible for understanding and securing automated CI/CD pipelines infrastructure as code (IaC) and advising other teams on security best practices across the entire pipeline development process. Our DevSecOps engineers are asked to solve challenging security problems for unique customers and have a direct impact on the direction of software products and solutions used by those customers.

Key Responsibilities:

• Implement secure and improve applications using GitLab CI/CD focusing on reviewing pipeline security scans and hardening of web applications.
• Support Certificate to Field granting to the customers platform using knowledge of secure development practices.
• Familiar with Platform One BigBang services and technologies.
• Work within Agile frameworks such as Scrum and Kanban utilizing Atlassian Jira and Confluence for project management and documentation.
• Understand how to deploy and manage containerized applications using Docker Kubernetes and ArgoCD on Red Hat Enterprise Linux environments.
• Be familiar with Infrastructure as Code (IaC) tools like Ansible and Terraform.
• Manage storage and artifact repositories using MinIO Nexus and S3 solutions.
• Be acquainted with monitoring system performance with tools like Grafana Kibana and Prometheus.
• Integrate and manage security scanning tools like Anchore NeuVector SonarQube and Twistlock (Prisma Cloud) into the CI/CD pipeline to identify and mitigate vulnerabilities.
• Secure sensitive data using HashiCorp Vault and SOPS Encryption for secrets management.
• Understand PostgreSQL and other database technology.
• Familiarity in various programming languages including JavaScript Bash Scripting C Go PHP Python Rust and TypeScript.
• Work with multiple frameworks and libraries such FastAPI Flask Flutter Rails React Shiny and Vue to support web application deployments.
• Utilize build tools like Gradle and Maven along with package managers such as Npm Yarn and Yum to manage dependencies and automate builds.

Required Qualifications:

• 12 years of proven experience in DevSecOps with a strong background in Linux and container technologies.
• Expertise in implementing and managing CI/CD pipelines.
• High level of experience with containerization technologies (Docker Kubernetes).
• Experience working with CI/CD tools (GitLab CI/CD).
• Expertise in working with IaC tools (Ansible Terraform).
• Knowledge of storage and artifact repositories (MinIO Nexus S3).
• Familiarity with monitoring tools (Grafana Kibana Prometheus).
• Experience with security scanning tools (Anchore NeuVector SonarQube Twistlock).
• Experience applying security remediations to systems and software.
• Experience with secrets management tools (HashiCorp Vault SOPS).
• US Citizen and an active Secret security clearance

Desired Qualifications:

• Familiarity with programming languages (e.g. Python Go Bash) and frameworks/libraries (e.g. .Net React Rails).
• Familiarity with build tools (e.g. Gradle Maven) and package managers (e.g. Npm Yarn Yum).
• Experience with databases (PostgreSQL).