Provide DevSecOps platform services that integrate security, compliance, and monitoring into all phases of cloud infrastructure and data products lifecycle management
Integrate IT Security Office approved-automated security controls, orchestrating vulnerability management, administering policy compliance, and providing continuous monitoring
Maintain secure and stable systems that enable continuous integration and delivery and reduce operational risk and support enterprise agility
Perform continuous scanning of all source and executable repositories for evolving threats detected after services are implemented
Ensure all code and IaC changes are version-controlled, peer-reviewed, security-scanned, and approved before promotion to production
Maintain continuous monitoring and alerting for all production deployments, with rollback procedures in place
Provide CI/CD pipeline and workflows for building, testing, and deploying
Promote workloads across environments with automated controls and approvals
Integrate security and compliance checks into CI/CD pipelines
Document all DevSecOps processes, standards, and toolset configurations, and maintain version-controlled documentation accessible to stakeholders
Integrate change control gates into the automated CI/CD workflow, with appropriate controls to prevent unauthorized or unreviewed code deployments to production
Coordinate with AO teams to establish and maintain standards for DevSecOps processes and toolsets, ensuring integration and interoperability across the enterprise ecosystem
Facilitate integration with third-party development, operations, and security tools to enable end-to-end visibility and control
Provide comprehensive end-user guides and training content for containerized pipeline features and security practices for the development team members
Conduct regular review and updates of DevSecOps practices and toolsets to incorporate emerging technologies, threat intelligence, and lessons learned
Create DevSecOps metrics reports (example: deployment frequency, mean time to resolution, vulnerability remediation time) to demonstrate effectiveness and drive improvement

Requirements

5+ years of experience in IT system engineering, systems development, systems coding and programming
Strong experience implementing and supporting end-to-end automated DevSecOps pipelines (CI/CD) and processes
Strong background in Infrastructure as code
Knowledge of large-scale infrastructure migration methodologies and techniques (IaaS/PaaS) including application migrations to cloud platforms (AWS)
Experienced in developing, testing, and maintaining containerized applications
Comprehensive knowledge of security compliance and security control
Certification for one or more of the following cloud platforms: Microsoft Azure, Google Cloud Platform, Amazon Web Services (AWS), and Oracle Cloud

Benefits

Comprehensive benefits and wellness packages
401K with company match
Paid time off including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave
15 days of paid leave per calendar year
Additional 10 paid holidays per year
Paid Family Leave program with up to 160 hours of paid leave in a rolling 12 month period
Short and long-term disability benefits
Life insurance and accidental death and dismemberment insurance
Critical illness and business travel accident insurance options

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

DevSecOpsCI/CDInfrastructure as Codeautomated security controlsvulnerability managementcontinuous monitoringcontainerized applicationscloud infrastructureapplication migrationssecurity compliance

Soft Skills

collaborationdocumentationtrainingcommunicationproblem-solvingorganizational skillsagilityinteroperabilitystakeholder engagementprocess improvement

Certifications

AWS certificationMicrosoft Azure certificationGoogle Cloud Platform certificationOracle Cloud certification