Role OverviewThe ideal candidate will have a passion for designing, implementing, and maintaining secure, resilient infrastructure and CI/CD pipelines that enable rapid, reliable software delivery. This position requires someone who excels in bridging development, security, and operations disciplines and is committed to embedding security throughout the entire software development lifecycle.
What You Will Do
The DevSecOps Engineer will serve as a key technical contributor on a collaborative DevSecOps team, working closely with developers, system administrators, and cybersecurity professionals to bring modern software development techniques to our DoD customers.
Why It Might Be a Fit
The candidate will perform tasks on both physical and virtual Linux and Windows systems and will support the maintenance of the TIEL’s Authority to Operate (ATO).
Requirements
- Design, implement, and maintain CI/CD pipelines that support the full software development lifecycle, from code commit through production deployment.
- Develop and maintain automation scripts and tools using Ansible and similar toolsets to streamline build, test, and deployment processes.
- Automate repetitive system administration and security tasks using shell scripting (Bash), Python, and configuration management tools to improve efficiency and reduce manual effort.
- Implement Infrastructure as Code (IaC) practices to ensure consistent, repeatable, and auditable environment provisioning.
- Integrate automated security testing, vulnerability scanning, and compliance checks into CI/CD pipelines to ensure secure code deployment.
- Support Risk Management Framework (RMF) processes and ensure systems comply with DoD security standards, STIGs, and applicable security technical implementation guides.
- Implement and maintain STIG compliance across Linux and Windows systems, including monitoring, testing, and remediation of findings using tools such as Ansible Automation Platform and Red Hat Satellite in offline environments.
- Implement and maintain system security measures, including role-based access control (RBAC), system firewalls, file system integrity monitoring, and encryption.
- Collaborate with cybersecurity teams to implement and maintain Security Information and Event Management (SIEM) technologies and techniques.
- Manage patch cycles, update management, and vulnerability remediation across development and production environments.
- Support the maintenance of the TIEL’s Authority to Operate (ATO) and system accreditation standards.
- Design, deploy, and maintain systems of varying complexity that support the DevSecOps paradigm in both Linux and Windows environments, with a primary focus on Red Hat Enterprise Linux (RHEL).
- Administer and support containerized environments using Kubernetes, Podman, and Red Hat OpenShift.
- Manage and maintain Red Hat Enterprise Linux, Red Hat Satellite, Ansible Automation Platform, VMware vCenter, Windows Server, and Windows 11 operating systems.
- Install, configure, and maintain Linux servers in both physical and virtual environments, including managing storage, networking, and virtualization (KVM).
- Implement and maintain single sign-on and multi-factor authentication systems in accordance with DoD guidelines and best practices.
- Manage data backup and disaster recovery solutions, ensuring data integrity and availability across physical and virtual environments.
- Support HPE Synergy storage and networking infrastructure.
- Conduct regular performance and security assessments of infrastructure, including troubleshooting and resolving hardware and software problems, scheduling upgrades, and collaborating with team members on network and system optimization.
- Develop and maintain monitoring, logging, and alerting solutions to support operational awareness and incident response.
- Develop and maintain detailed documentation for system configurations, operational procedures, security policies, and standard operating procedures.
- Research new technologies and leverage optimization techniques to ensure Linux and Windows systems operate efficiently.
- Stay current with emerging DevSecOps tools, technologies, and best practices, sharing knowledge to foster a culture of continuous improvement.
]]>