Senior DevSecOps Engineer

Stratus Solutions - Herndon, VA

Full-time

Herndon, VA

Professional, Scientific, and Technical Services

About the position

Applied Insight is seeking a skilled DevOps Engineer to join our team, where you will play a crucial role in designing, deploying, and managing containerized applications using Kubernetes. In this position, you will optimize and troubleshoot Kubernetes clusters to ensure performance and reliability. You will also be responsible for developing and maintaining CI/CD pipelines using ArgoCD and Helm, automating deployment processes, and ensuring seamless integration with development workflows. Security is a top priority, and you will implement and manage security practices within the DevOps pipeline, utilizing tools like Trivy for container vulnerability scanning to ensure compliance with security policies and standards. Collaboration is key in this role, as you will work closely with development, operations, and security teams to ensure best practices are followed and to resolve any issues related to container security and deployment. You will monitor the health and performance of containerized applications and infrastructure, providing regular reports and insights to stakeholders on system security and performance. Additionally, you will manage and provision resources within AWS, Azure, GCP, and other environments, automating with code using popular DevOps tools and scripting languages such as Terraform, Packer, Salt, Ansible, Python, Powershell, Bash, Javascript, and Go. Your responsibilities will also include contributing to git repositories, helping with code review and approval, deploying and managing Kubernetes clusters, implementing Single-Sign-On (SSO) solutions with MFA, SAML, and iDP integration, and developing and managing VDI solutions utilizing AWS Workspaces and Azure Windows Virtual Desktop. You will be expected to harden security at the cloud provider, networking, and OS layers, configure and manage logging to EFK Stacks (ElasticSearch, Fluentd, Kibana), and perform deep-level troubleshooting of cloud services, various tools, and applications. Continuous documentation updates and process improvements for deployments will also be part of your daily tasks.

Responsibilities

• Design, deploy, and manage containerized applications using Kubernetes.
• Optimize and troubleshoot Kubernetes clusters for performance and reliability.
• Develop and maintain CI/CD pipelines using ArgoCD and Helm.
• Automate deployment processes and ensure seamless integration with development workflows.
• Implement and manage security practices within the DevOps pipeline.
• Use Trivy for container vulnerability scanning and ensure compliance with security policies and standards.
• Work closely with development, operations, and security teams to ensure best practices are followed.
• Monitor the health and performance of containerized applications and infrastructure.
• Provide regular reports and insights to stakeholders on system security and performance.
• Manage and provision resources within AWS, Azure, GCP, and other environments.
• Automate with code utilizing popular DevOps tools and scripting languages.
• Contribute to git repositories and help with code review and approval.
• Deploy, configure, and manage Kubernetes clusters utilizing tools and services such as Helm, ArgoCD, Istio, and Prometheus.
• Implement Single-Sign-On (SSO) solutions with MFA, SAML, and iDP integration.
• Implement Role-Based Access Control (RBAC), policy creation and enforcement.
• Develop and manage VDI solutions utilizing AWS Workspaces, Azure Windows Virtual Desktop and other offerings.
• Harden security at the cloud provider, networking, and OS layers.
• Configure, manage and integrate logging to EFK Stacks (ElasticSearch, Fluentd, Kibana).
• Develop and assist with architecting custom solutions with code, tools, and cloud services.
• Perform deep-level troubleshooting of cloud services, various tools, and applications.
• Create and continuously update documentation.
• Continuously work with management and peers to improve processes and timeliness for deployments.

Requirements

• U.S. Citizenship required.
• Current TS/SCI clearance.
• Experience with containerization, cloud automation, CI/CD, or serverless tools.
• Experience with implementing, troubleshooting and securing/monitoring cloud networks (TCP/IP, Layer 3 Routing, BGP, Firewall Security).
• Cloud Experience (AWS, Azure) and knowledge of best practices.
• Experience with scripting languages such as Python, Go, Bash, or PowerShell.
• Experience with Linux configuration management, system administration, and troubleshooting.
• Experience with configuring and deploying containers.
• Experience with CI/CD pipelines (e.g., Gitlab, Jenkins).
• Experience developing using cloud infrastructure (e.g., AWS, Azure) using containers and orchestration (e.g., Docker, Kubernetes), managed using infrastructure as code (e.g., Terraform, Ansible).

Nice-to-haves

• Certifications related to Kubernetes (e.g., CKA/CKAD), cloud platforms, or security.
• Experience with additional tools or platforms such as Prometheus, Grafana, or other security tools.

Benefits

• Multiple health insurance options including a PPO plan with ZERO deductibles and an HSA plan.
• 401k Immediate Vesting with company matching 100% of the first 3% contributed and 50% of the next 2% contributed.
• Fully paid long-term disability, short-term disability, and life insurance.
• Flexible Spending Account options.
• Generous paid time off.
• Flexible work schedules with the ability to bank extra hours for additional time off.
• Government shutdown protection allowing employees to not use leave for up to 3 days for inclement weather or budget issues.
• Employee centric culture promoting empowerment and success.
• Commitment to learning and growth with training budget, education assistance, mentorship programs, and collaborative learning sessions.
• Collaborative environment fostering communication and an open-door policy.