Senior DevSecOps Engineer #11012

• US Citizenship Required due to project scope • Job Description – Sr. IT DevSecOps Engineer Position Summary The Sr. IT DevSecOps Engineer will build GitLab‑based DevSecOps automated pipelines into AWS GovCloud, support and accelerate application delivery on the CI/CD platform, and manage and operate GitLab CI/CD environments. Certifications • GitLab certification desired but not required • AWS certification desired but not required Knowledge, Skills, and Experience • Version Control Systems • Proficiency with Git • Advanced knowledge of GitLab, including CI/CD pipelines, merge requests, and issue tracking • Familiarity with branching, promotion, and release strategies (such as SemRel) • Familiarity using internalized registries and repositories (Nexus dependency management, internal container registries, etc.) CI/CD • GitLab CI/CD • GitLab runners (configuration and management) • GitLab components (or generally developing and utilizing templates for CI/CD jobs in any platform, such as GitHub Actions) Cloud Platforms • Demonstrated proficiency with AWS (Lambda, EC2, S3, EBS/EFS, ECS, EKS, SNS, CloudWatch) Containerization • Docker (building, deploying, and managing containers) • Kubernetes (orchestration, deployment strategies, security, troubleshooting) • Container security best practices • Container hardening strategies, such as maintaining a secure “golden” image • Deploying and managing container-based runners hosted on EKS • GitOps tools and deployment principles (such as ArgoCD/Flux) Security Testing • Static Application Security Testing (SAST) • Dynamic Application Security Testing (DAST) • Interactive Application Security Testing (IAST) • Software Composition Analysis (SCA) • Container scanning tooling (Trivy, Prisma/Twistlock, Neuvector, etc.) Infrastructure as Code (IaC) • Terraform (writing, managing, and optimizing Terraform configurations) • Other IaC tools (e.g., CloudFormation, Ansible) Scripting and Programming • Proficiency in scripting languages (e.g., Python, Bash) • Basic to intermediate programming skills • Experience working with a Linux-based shell and navigating Linux systems • Ability to work well in a paired programming environment at times Automation • Creating and maintaining automated security checks and remediations • Integrating security into automated deployment processes • Incorporating linting tooling into development processes • Incorporating unit & performance testing into deployment processes