DevSecOps

Take2 Consulting - Tampa, FL

Full-time - Senior

Tampa, FL

Professional, Scientific, and Technical Services

About the position

Take2 Consulting is seeking a highly skilled DevSecOps Engineer with a strong background in cloud infrastructure and security to join our team in Tampa, FL. This position requires a minimum of 10 years of experience in the field, with a focus on supporting Department of Defense (DoD) projects. The successful candidate will interface with various stakeholders to capture requirements and plan the execution of technical requirements, providing both verbal and written briefs to government stakeholders. The role involves working closely with the IA/J6 team to provide necessary documentation and artifacts through the Risk Management Framework (RMF) process, leading to full Authority to Operate (ATO). The DevSecOps Engineer will assist in the deployment and mission command system architecture on AWS and Azure environments classified at IL5, IL6, and IL7. This includes designing and implementing automation tools and frameworks for continuous integration, delivery, and deployment. The engineer will monitor and manage infrastructure to ensure optimal performance, security, and scalability, while also assisting in architecting a universally available on-prem Kubernetes RKE2 deployment model for mission-critical customers. In addition to deployment automation using tools like Ansible, the engineer will be responsible for creating and maintaining continuous integration and deployment (CI/CD) pipelines, writing scripts to automate software testing and deployment, and proactively monitoring build and deploy pipelines. The role also includes automating security testing and vulnerability scanning, remediating findings from these processes, and mentoring other staff in DevOps concepts and processes. The engineer will collaborate with peers and business partners to identify workflows where automation can improve efficiency and reduce costs, and engage with internal departments and third-party vendors for security and infrastructure support. The position requires a proactive approach to troubleshooting technical issues, ensuring uptime, managing failovers, and scaling infrastructure as needed. The engineer will also be responsible for the overall functionality and maintenance of high availability clusters, working closely with the DEVSECOP team to coordinate the deployment of updates and security patches.

Responsibilities

• Interface with stakeholders and capture requirements, plan the execution of technical requirements and provide verbal and written briefs to government stakeholders.
• Interface with IA/J6 to provide necessary documentation and artifacts through the RMF process leading to full ATO.
• Assist with deployment and mission command system architecture on AWS & Azure IL5, IL6, and IL7 environments.
• Design and implement automation tools and frameworks for continuous integration, delivery, and deployment.
• Monitor and manage infrastructure, ensuring optimal performance, security, and scalability.
• Assist in architecting universally available, on-prem Kubernetes RKE2 deployment model for mission-critical customers.
• Streamline deployment automation using Ansible and other tools.
• Design, configure, and maintain infrastructure and/or cloud resources necessary to reliably host, run, and support applications through all phases of the software development life cycle (SDLC).
• Create and maintain continuous integration and deployment (CI/CD) pipelines.
• Write scripts and configurations to automate software testing, deployment, and maintenance in a manner consistent with software engineering best practices.
• Proactively monitor build and deploy pipelines and infrastructure, apply patches, troubleshoot issues, and resolve errors.
• Automate infrastructure and cloud resource deployments and configuration using infrastructure-as-code tools.
• Work with engineering teams to create CI/CD pipelines for their applications and ensure code is properly integrated into the CI/CD pipelines.
• Configure and support development environments for consistent development processes across devices.
• Participate in the design of the version control system and configure it to align with the software development life cycle (SDLC) and security policies and best practices.
• Automate security testing and vulnerability scanning and integrate it into the development process.
• Remediate findings from vulnerability scanning and penetration testing.
• Assist with training users on both new and existing functionality.
• Informally mentor other staff in DevOps concepts and processes.
• Collaborate with peers and business partners to identify workflows or processes where automation can improve efficiency and reduce costs.
• Leverage multivendor APIs and write scripts to create solutions to improve existing processes.
• Engage internal departments and third-party vendors for security and infrastructure support and best practices.
• Troubleshoot technical issues, identify the cause, determine resolutions, and remediate issues in existing applications.
• Deploy and maintain MinIO in distributed mode to ensure high availability and fault tolerance.
• Implement multiple control-plane nodes with a load balancer in front to distribute traffic and ensure high availability.
• Ensure a multi-node setup for GitOps tools and store configurations redundantly across nodes.
• Regularly back up configurations and implement real-time replication.
• Ensure uptime, manage failovers, and scale as needed.
• Update containers baseline and apply systems patching.
• Responsible for the overall functionality and maintenance of the HA cluster.
• Work closely with the DEVSECOP team to coordinate the deployment of updates and other security patches.

Requirements

• Minimum of 7 years as DevOps engineers supporting DoD projects.
• Must be a US citizen with Active DoD security clearance.
• Direct experience architecting, deploying, and maintaining IL6 and IL7 cloud infrastructure.
• Linux system administration experience.
• EKS, AKS deployment experience.
• CKA, CKAD, or other relevant Kubernetes certifications or experience.
• Experience architecting, deploying, and maintaining high availability Kubernetes clusters in an air-gapped environment.
• Familiar with DoD system security requirements and processes such as RMF, DISA STIG, GRC guidelines for cloud services, container hardening, security patching, etc.
• Strong technical communication skills.
• Ability to generate and brief architecture design and network diagrams.
• Maintain a minimum of Security+ certification.
• Networking experience is a plus.
• Motivated individual, willing to work in a small team environment, assume different responsibilities when required.
• Problem-solving skills with a strong communication skill set.
• Familiarity with AWS/Azure cloud automation tools such as Terraform, GitOps, S3, EKS, AKS, RDS, IAM, CloudWatch, etc.
• AWS & Azure certification.
• Experience architecting high availability core services such as HA PostgreSQL, Minio, Ingress NGINX, Key cloak, etc.

Nice-to-haves

• Networking experience is a plus.