About the position
The DevSecOps Engineer at TheIncLab is responsible for building and maintaining CI/CD pipelines that facilitate the software development lifecycle while integrating security practices throughout the process. This role is crucial for ensuring that the software developed for the Department of Defense and mission-critical teams is secure and reliable. The position requires a strong focus on automation, security testing, and collaboration with development teams to promote best practices in secure software development.
Responsibilities
- Develop and maintain continuous integration and continuous deployment (CI/CD) pipelines
- Use tools to automate repeatable tasks to improve the software development lifecycle
- Use cloud services to deploy pipelines that can communicate with code repositories and artifact storage solutions
- Integrate with version control tools to automatically trigger processes on branch updates
- Troubleshoot and resolve build issues to ensure high reliability of the pipeline
- Integrate and test security testing frameworks into build pipelines
- Educate teams on security best practices and encourage secure development practices
- Increase team awareness of common threats and their mitigation strategies
- Implement monitoring tools to detect and respond to security threats across the development pipeline and production environment
- Use tools to continuously scan for vulnerabilities in code and third-party libraries
- Integrate automated testing frameworks into build pipeline that ensure code quality
- Identify and track metrics that measure the reliability and performance of CI/CD pipelines
- Research and design solutions (infrastructure, methods, and tools) to improve the CI/CD process
- Create an inclusive environment across all aspects of the development team that supports and promotes continuous learning, knowledge sharing, and teamwork
- Promote, manage, and support an Agile organization and structure to manage and complete project milestones and deliverables
- Other responsibilities as assigned
Requirements
- A bachelor's degree in engineering, Computer Science, Information Technology, or equivalent discipline
- 3+ years of experience in DevOps engineering
- Demonstrated experience building and deployment
- Demonstrated experience in security testing and automation
- Experience in threat modeling & detection, and vulnerability scanning
- Demonstrated experience using CI/CD tools such as Jenkins, Travis, Gitlab CI, GitHub Actions, or CircleCI
- Experience using cloud platforms such as AWS, Azure, or Google Cloud
- Experience using version control systems (e.g. Git)
- Experience with shell scripting tools such as PowerShell and Bash
- Excellent problem-solving and troubleshooting skills
- Experience deploying and maintaining containerized software using tools such as Docker
Nice-to-haves
- Demonstrated proficiency in architecting automated pipelines that improved the software development process
- Demonstrated experience embedding security at every stage of the software development process
- Experience with container orchestration tools (e.g. Kubernetes, Helm)
- Experience with infrastructure as code tools (e.g. Terraform, Ansible)
- Experience with monitoring, logging, and alerting tools (e.g. Grafana)
- Experience with Agile methodologies and tools (e.g. JIRA)
- Certifications in DevOps and cloud platform technologies
Benefits
- Hybrid and Flexible Work Environment
- Professional Development Programs
- Paid Time Off
- Health and Wellness Benefits
- 100% Company Paid Benefits
- 401(k) Plan Options
- Pet Insurance
- Incentive Bonuses
- Company Sponsored Events, Retreats, and Swag!
- Relocation Assistance
