Senior DevSecOps Engineer

Full-time - Senior

Hill Air Force Base, UT

Transportation Equipment Manufacturing

About the position

BAE Systems is seeking a motivated, self-driven, Senior DevSecOps Platform Engineer for an exciting opportunity to support the Air Force's acquisition of the next generation Intercontinental Ballistic Missile (ICBM). This role will be working directly with an experienced software development team in creating a platform to allow development inside an environment that aligns with DevSecOps and GitOps principles towards CI/CD. You will help with rapidly deploying web applications into various cloud platforms with a security mindset. You will develop automation scripts for our CI/CD pipeline and code infrastructure for various cloud platforms through Infrastructure as Code.

Responsibilities

• Design, implement, and maintain the infrastructure for our CI/CD pipelines, ensuring they incorporate security at every stage.
• Embed security tools and practices into the development lifecycle, including automated security testing, vulnerability assessments, and compliance checks.
• Automate security controls and compliance processes to enhance speed, reliability, and security of software releases.
• Set up and manage systems for monitoring security threats, vulnerabilities, and compliance issues in real-time, with mechanisms for rapid response.
• Work closely with software developers, system administrators, and security analysts to ensure security is a shared responsibility across teams.
• Maintain comprehensive documentation on security standards, procedures, and the platform architecture for both technical and non-technical stakeholders.
• Lead or participate in the response to security incidents, ensuring systems are hardened against future threats.
• Regularly review and improve security practices and tools based on emerging threats, technology trends, and organizational needs.

Requirements

• 7+ years of directly related work experience with Bachelor's degree (or 5 years' experience with MS). At least 3 years progressive responsibility providing technical leadership.
• Familiar with DevSecOps and GitOps Methodologies.
• Knowledge of scripting languages to automate processes is required.
• Experience with containers and deployment into Kubernetes clusters.
• Serving as a system administrator for Linux systems and Windows systems.
• Configure and maintain environments in Linux (RHEL and Ubuntu).
• Configure, deploy and maintain containerized systems using Kubernetes, Docker, Terraform, and/or AWS Cloud Formation.
• Gather and analyze metrics from both operating systems and applications to assist in performance tuning and fault finding.
• Support AWS Cloud and/or Azure environments.
• Deploy and build software using npm, container and package repos, Gitlab, security tools for all phases of SDLC, and other related tools.
• Configuration management to achieve Infrastructure as Code (IaC) and Security as Code (SaC).
• Troubleshoot build issues, script failures, network and system errors.
• Document processes and procedures.
• Familiar with NIST Controls and DFARS.
• Ability to demonstrate the skills and capabilities to successfully execute the duties and responsibilities of this position.

Nice-to-haves

• Development of solutions for complex Business Intelligence ecosystems.
• Experience with secure IT systems and ATOs which comply with DoD standards and regulations for secure network operations (DoDI 8510.01, RMF, FedRamp, etc).
• CompTIA Sec+ certification.
• Experience with managing container repos like Harbor or Gitlab and package repos like Verdaccio or Nexus Repository.
• Active DoD Secret Security Clearance.

Benefits

• Health, dental, and vision insurance.
• Health savings accounts.
• 401(k) savings plan.
• Disability coverage.
• Life and accident insurance.
• Employee assistance program.
• Legal plan.
• Discounts on home, auto, and pet insurance.
• Paid time off.
• Paid holidays.
• Paid parental leave.
• Military leave.
• Bereavement leave.
• Federal and state sick leave.