Software Engineer, DevSecOps

4 нед. назад

СШАOnsite

gitlab cijenkinscontainerized applicationsterraformansiblepackerinfrastructure as codeconfiguration as code

Develop and manage secure CI/CD pipelines for cybersecurity programs, automating security controls and evidence collection.

Be Challenged and Make a Difference In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At , we provide unmatched value to our customers and employees through innovative solutions and an engaging culture. Description of Task to be Performed: is seeking a Software Engineer-DevSecOps to support one of our cybersecurity programs in our San Antonio office. In this position, the right candidate will develop and manage the CI/CD pipelines of mission applications across value streams. Considered a strong generalist on CI/CD and security requirements, the role automates security control implementation and evidence collection and advances inheritance and automation aligned with the Government’s Cyber Assessment Roadmap to sustain IATT, ATO, and cATO readiness. Position Responsibilities: This position establishes the automation standard for secure software delivery, ensuring security is built into pipelines, and control evidence is generated continuously. Responsibilities include: Build and maintain CI/CD pipelines (e.g., GitLab CI, Jenkins) for an enterprise consisting of many applications. Develop, test, and maintain containerized applications; work with source version control and build/release tooling. Develop Infrastructure as Code (IaC) and Configuration as Code (CaC) using Packer, Terraform, and Ansible. Automate security control implementation, validation, and evidence collection support

Clearance: U.S. Citizen; TS/SCI.
Education: Bachelor's degree in Computer Science, Cybersecurity, IT, Software Engineering, or related field.
Certification: DoD 8140/8570 IAT Level II e.g., Security+ CE or equivalent.
Location: Full-time on-site in San Antonio, TX.
Experience and Knowledge:
Senior level comprehensive knowledge across key tasks and high-impact assignments; plans and leads major technology assignments; functions as a technical expert across the team; may lead others.
Deep understanding of Agile and DevSecOps methodologies; DevSecOps implementation using Jenkins, GitLab, or similar.
Skillset to build and maintain CI/CD pipelines for a large enterprise (hundreds of applications).
Experience developing IaC/CaC with Packer, Terraform, and Ansible; development experience with Kubernetes, Docker, and Helm.
Experience with cloud systems and architectures (AWS, Google Cloud, or Azure); Linux and scripting (Bash, Python).
Working knowledge of source version control, build/release tools, and CI/CD; strong security-first mindset.
Minimum years of experience - 4 years of relevant experience

Clearance: Active TS/SCI.
Education: Advanced degree in a related technical field.
Certification: CKS, CKA, AWS certifications, CCSP, or GitLab certifications.
Experience and Knowledge:
Experience developing software with Java/Spring, Python, JavaScript/node.js, or Angular; microservice architectures (REST, JMS, AMQP).
Experience with Istio; experience supporting Government software factory environments.
Experience supporting Continuous Authority to Operate (cATO).
Experience with secure software supply chain (SBOM, artifact signing).
Experience supporting IL4, IL5, or IL6 cloud environments; COT, CPT, or Security Control Assessors.
Experience with GitLab security policies, Twistlock, Anchore, Defect Dojo, container signing (e.g., cosign/sigstore), and End-of-Life image detection.