Site Reliability Engineer - DevSecOps

$125,000 - $150,000/Yr

GovCIO - Aberdeen Proving Ground, MD

Full-time - Mid Level

Remote - Aberdeen Proving Ground, MD

About the position

GovCIO is seeking a DevSecOps / Site Reliability Engineer to support the U.S. Army C5ISR Center, focusing on developing technologies that enhance the capabilities of the Army. This remote position involves working collaboratively to ensure the security and efficiency of the Army's infrastructure, utilizing various DevSecOps tools and practices.

Responsibilities

• Perform daily infrastructure as code updates
• Deployments to Kubernetes
• Participate in design and code reviews
• Document DevSecOps processes
• Create, develop, and implement solutions for infrastructure and security
• Identify needs for build automation and implement CI/CD solutions
• Maintain GitLab pipelines
• Support pushes to Kubernetes
• Implement tools and technologies
• Test new systems and applications
• Automate key security processes
• Identify security holes and potential breaches
• Develop security strategies and controls
• Mitigate risks and vulnerabilities
• Promote cybersecurity awareness
• Comply with relevant standards and regulations
• Monitor the overall network and security infrastructure
• Consult on DevSecOps requirements from diverse application partners
• Create reusable solutions for CICD pipelines
• Publish and disseminate CICD best practices
• Ensure service uptime and response time SLAs are met
• Design action plans for CICD platform shortcomings
• Troubleshoot and fix problems in the DevSecOps domain
• Ensure incident tracking tools are updated
• Identify management concerns and offer solutions
• Align with SDLC processes and service management principles
• Create and publish engineering platforms and solutions

Requirements

• High School diploma with 6 - 9 years of experience or commensurate experience
• Secret Clearance (Interim Secret acceptable)
• Comprehensive technical expertise in DevSecOps toolkits (Docker, Helm Chart, Artifactory, Jira, Sonarqube, Nexus, Kubernetes, Terraform, GitLab)
• Experience deploying BigBang from Platform One or other helm charts
• Knowledge of DevOps Automation (Terraform, GitHub, GitHub Actions)
• Knowledge of security tools (Prisma cloud, SIEM, SOC, Nessus, Crowd strike)
• Familiarity with API Security, Container Security, AWS Cloud Security
• Knowledge of PCI-DSS, HIPPA, SOX, GDPR, CCPA Standards
• Familiarity with AWS policy and security management tools
• Experience with security automation and machine learning
• Excellent analytical and interpersonal skills
• Ability to communicate technical information clearly
• Strong understanding of the Software Development Lifecycle
• Knowledge of best security practices and principles
• 8570.01-M Certifications: Security+ (or equivalent)

Nice-to-haves

• Preferred experience with Ansible and/or Jenkins

Benefits

• Competitive salary
• Health insurance
• 401k plan
• Paid time off
• Professional development opportunities