DevSecOps Engineer

Gray Operations group is seeking an experienced DevSecOps Engineer to join our team.

The DevSecOps Engineer works as a member of a DevSecOps team focusing on automation development, testing, and deployment through the entire Continuous Integration and Continuous Deployment/Delivery (CI/CD) pipeline development lifecycle. The ideal candidate will work to bring modern software development techniques to our DOD customers. The DevSecOps Engineer serves as an escalation point for critical and complex issues, performs configuration, integration, and testing of products, assists with developing and documenting work processes, and trains other team members.

Requirements

• One of the following combinations of education and experience: BS/BA degree and a minimum of 5-10 years of related experience. High School Diploma or equivalent and a minimum of 7-14 years of related experience
• Experience collaborating with development, operations, and security teams in the maintenance and development of various CI/CD pipelines, automated software builds, and tests.
• Design, implement, and maintain systems of varying complexity that support the DevSecOps paradigm of software development processes in a Linux and Windows environment.
• Experience with integrating Security Information and Event Management (SIEM) technologies and techniques.
• Experience working with Software Development Lifecycle tools, such as GitLab, Jira, Jenkins.
• Experience collaborating with development, operations, and security teams to integrate security into DevSecOps workflows.
• Working experience cloud, virtualization, APIs, and modern software languages.
• One of the following active DoD 8570 IAT Level II certifications: CCNA-Security CySA+ GICSP GSEC Security+ CE CND SSCP
• US Citizenship Required; Ability to obtain and maintain DoD Secret Clearance (Interim clearance required to start, full clearance at the completion of the government’s process).

Desired Qualifications

• Experience with Security Information and Event Management (SIEM) systems like Elastic, Splunk, LogRhythm, QRadar, ArcSight Enterprise Security Manager (ESM), Crowdstrike.
• Software development experience in one or more general-purpose programming languages: Java, Python, Go, Ruby, C++, etc.
• Experience working with containers (Kubernetes, Docker).
• Experience working with automation tools such as Ansible, Vagrant, Puppet, Terraform, and similar toolsets.