Sr. Cloud DevSecOps Engineer

$85,800 - $180,200/Yr

CACI International - Herndon, VA

Full-time - Mid Level

Herndon, VA

Professional, Scientific, and Technical Services

About the position

The Sr. Cloud DevSecOps Engineer at CACI plays a crucial role in enhancing the capabilities of federal government customers by leveraging advanced technologies in cloud infrastructure, big data, and cybersecurity. This position involves designing, deploying, and managing containerized applications, optimizing Kubernetes clusters, and ensuring security practices within the DevOps pipeline. The engineer will work closely with development, operations, and security teams to implement best practices and resolve issues, contributing to the overall mission of national security and public service.

Responsibilities

• Design, deploy, and manage containerized applications using Kubernetes.
• Optimize and troubleshoot Kubernetes clusters for performance and reliability.
• Develop and maintain CI/CD pipelines using ArgoCD and Helm.
• Automate deployment processes and ensure seamless integration with development workflows.
• Implement and manage security practices within the DevOps pipeline.
• Use Trivy for container vulnerability scanning and ensure compliance with security policies and standards.
• Work closely with development, operations, and security teams to ensure best practices are followed and to resolve any issues related to container security and deployment.
• Monitor the health and performance of containerized applications and infrastructure.
• Provide regular reports and insights to stakeholders on system security and performance.
• Manage and provision resources within AWS, Azure, GCP, and other environments.
• Automate with code utilizing popular DevOps tools and scripting languages, including Terraform, Packer, Salt, Ansible, Python, Powershell, Bash, Javascript, and Go.
• Contribute to git repositories and help with code review and approval.
• Deploy, configure, and manage Kubernetes clusters utilizing tools and services such as Helm, ArgoCD, Istio, and Prometheus.
• Implement Single-Sign-On (SSO) solutions with MFA, SAML, and iDP integration.
• Implement Role-Based Access Control (RBAC), policy creation and enforcement.
• Develop and manage VDI solutions utilizing AWS Workspaces, Azure Windows Virtual Desktop and other offerings.
• Harden security at the cloud provider, networking, and OS layers.
• Configure, manage and integrate logging to EFK Stacks (ElasticSearch, Fluentd, Kibana).
• Develop and assist with architecting custom solutions with code, tools, and cloud services.
• Perform deep-level troubleshooting of cloud services, various tools, and applications.
• Create and continuously update documentation.
• Continuously work with management and peers to improve processes and timeliness for deployments.

Requirements

• B.S. in a technical field and 5 years of demonstrated, relevant experience.
• Experience with containerization, cloud automation, CI/CD, or serverless tools.
• Experience with implementing, troubleshooting and securing/monitoring cloud networks (TCP/IP, Layer 3 Routing, BGP, Firewall Security).
• Cloud Experience (AWS, Azure) and knowledge of best practices.
• Experience with scripting languages such as Python, Go, Bash, or PowerShell.
• Experience with Linux configuration management, system administration, and troubleshooting.
• Experience with configuring and deploying containers.
• Experience with CI/CD pipelines (e.g., Gitlab, Jenkins).
• Experience developing using cloud infrastructure (e.g., AWS, Azure) using containers and orchestration (e.g., Docker, Kubernetes), managed using infrastructure as code (e.g., Terraform, Ansible).

Nice-to-haves

• Certifications related to Kubernetes (e.g., CKA/CKAD), cloud platforms, or security.
• Experience with additional tools or platforms such as Prometheus, Grafana, or other security tools.

Benefits

• Healthcare coverage
• Wellness programs
• Financial benefits
• Retirement plans
• Family support
• Continuing education opportunities
• Flexible time off benefits