Azure DevSecOps Engineer

Quadrant - Fort Meade, MD

Full-time

Fort Meade, MD

Management of Companies and Enterprises

About the position

The Azure DevSecOps Engineer at Quadrant, Inc. is responsible for creating, designing, developing, and managing DevSecOps CI/CD pipelines. This role involves working collaboratively with teams to enhance DevSecOps processes and tools, ensuring that deliverables meet user acceptance criteria while adhering to security practices. The engineer will act as a trusted advisor for automation and tooling initiatives, providing insights and recommendations based on industry standards.

Responsibilities

• Create, design, develop, and manage DevSecOps CI/CD pipelines using tools such as Jenkins, Groovy, GitLab, and Nexus.
• Collaborate with teams to continuously improve DevSecOps processes and tools.
• Ensure that work products meet user acceptance criteria.
• Manage self-directed assignments and meet schedule deadlines with high-quality deliverables.
• Act as a trusted automation and tooling advisor for DevSecOps initiatives, providing practical insights and advice.
• Recommend and implement industry standards for DevSecOps practices.
• Implement and ensure adherence to security practices within automated pipelines.

Requirements

• Secret or TS clearance is required.
• Certification in one or more cloud environments (Azure or AWS).
• 5+ years of DevSecOps experience.
• 3+ years of experience with Azure and DevSecOps environments.
• 3+ years of experience with application and operating system security.
• Experience in Agile methodologies such as Scrum, Lean, Kanban, or Scrumban.
• 3+ years of experience creating CI/CD pipelines using tools such as Jenkins, Terraform, Ansible, Docker, and Helm.
• Experience with YAML and Groovy.
• Knowledge and experience working in DoD Azure environments is preferred.
• Experience with tools such as Jira, Confluence, Bitbucket, Kubernetes, Docker, Jenkins, Groovy, GitLab, Nexus, SonarQube, Fortify, OSCAP, and Anchore.
• Familiarity with testing frameworks such as JUnit, TestNG, or Mockito.
• Excellent written and verbal communication skills, with the ability to convey complex information security topics to diverse audiences.
• Bachelor's degree in Computer Science, Information Systems, Engineering, Business, or a related field.