Lead DevSecOps Engineer

$141,000 - $202,000/Yr

SciTec - Boulder, CO

Full-time - Senior

Boulder, CO

Merchant Wholesalers, Nondurable Goods

About the position

The Lead DevSecOps Engineer at SciTec is responsible for leading the DevSecOps efforts on key government contracts, providing mentorship to software engineers, and overseeing the integration and deployment of applications. This role requires a strong technical background in DevSecOps practices, with a focus on security, continuous integration, and deployment in cloud environments.

Responsibilities

• Lead the DevSecOps effort on one of SciTec's key contracts
• Provide DevSecOps mentorship for software engineers and DevSecOps staff
• Oversee the integration, security scanning, and deployment of multiple applications into orchestrated frameworks
• Work with deployment teams to orchestrate deployments to development, test, and operational environments
• Create, maintain, and improve Continuous Integration (CI) pipelines in gitlab-ci
• Monitor CI pipelines for performance and resolve observed or reported issues
• Implement and maintain version promotion of one or more applications within CI pipelines
• Integrate CI pipelines with development tools for artifact management, software test, software quality assessment, etc.
• Implement Continuous Delivery and execute automated or manual deployments of applications into orchestrated k8s environments
• Execute checkout and troubleshooting of deployed applications within development and production environments
• Execute software release processes including release branch creation, integration, checkout and test
• Implement and maintain Helm charts
• Ensure cybersecurity protocols are followed
• Other duties as assigned.

Requirements

• 8+ years of professional experience providing technical DevSecOps leadership
• Strong record of mentorship and advocacy for DevSecOps practices
• Expertise with developing application container deployment solutions using Docker, docker-compose, Kubernetes, etc.
• Deep experience with Amazon Elastic Kubernetes Service (EKS)
• Experience with Istio service mesh as well as Prometheus and Grafana
• Strong professional experience maintaining deployment environments for development, test and production
• Experience with authentication technologies, such as Keycloak
• Strong professional experience using Linux operating systems
• Development experience in Python and C++
• A bachelor's degree in computer science, engineering, mathematics, or physical sciences
• The ability to obtain and maintain a DoD security clearance
• Ability to work 100% on-site
• Detail oriented
• Good verbal and written communication skills

Nice-to-haves

• Functional management (had direct reports)
• Strong experience with software vulnerability scanning with static and dynamic code analysis
• Experience with software vulnerability assessment and remediation using SAST/DAST and tools like Sonarqube
• Strong experience with software package artifact management using JFrog Artifactory, Nexus or similar
• Experience with container security tools such as Grype, Syft
• Experience with version control using Git
• Systems and service administration in a Linux environment, including the installation and maintenance of applications supporting CI/CD like Gitlab, etc.

Benefits

• Employee Stock Ownership Plan (ESOP)
• 3% Fully Vested Company 401K Contribution (no employee contribution required)
• 100% company paid HSA
• Medical insurance, with a choice of 2 buy-up options
• 80% company paid Dental insurance
• 100% company paid Vision insurance
• 100% company paid Life insurance
• 100% company paid Long-term Disability insurance
• 100% company paid Hospital Indemnity insurance
• Voluntary Accident and Critical Illness insurance
• Short-term Disability insurance
• Annual Profit-Sharing Plan
• Discretionary Performance Bonus
• Paid Parental Leave
• Generous Paid Time Off, including Holiday, Vacation, and Sick Pay
• Flexible Work Hours