DevSecOps Engineer

T-Rex Solutions, LLC

As a primary provider of IT government modernization services, we solve our clients' complex challenges by leveraging our technical expertise.

T-Rex Solutions is looking to select a DevSecOps Engineer to support an enterprise cloud development effort with our US Census Bureau customer. This effort aims to facilitate holistic multi-cloud solutions to meet the enterprise-wide infrastructure need and work will be performed in a hybrid remote/on-site capacity. Work will be remote 3 days per week and up to 2 days per week on-site in Hyattsville, MD.

Responsibilities:

• Support design, implementation, and maintenance of security controls and processes across the SDLC, including code scanning, vulnerability assessment, and security testing.
• Create, develop, and implement automation and system integration for various build platforms.
• Create plug-and-play/reusable solutions and patterns for CICD pipelines, and build or maintain CICD building blocks and shared libraries proactively for development and deployment efficiency.
• Publish and disseminate DevSecOps best practices, patterns, and solutions.
• Monitor and respond to security incidents, conducting root cause analysis and implementing corrective actions to prevent future occurrences.
• Design action plans to address CICD platform/tools/solutions’ shortcomings and difficulties.
• Work closely with Cloud Infrastructure and Security teams to ensure organizational best practices are followed.
• Perform performance analysis and optimization, monitoring and problem resolution, upgrade planning and execution, and process creation and documentation.
• Align with technological Systems/Software Development Life Cycle (SDLC) processes and industry-standard service management principles (such as ITIL).
• Opportunity to function in project leadership roles and gain the ability to represent the team as the prime customer contact on significant technical matters.
• Technologies you will use include: Docker, Kubernetes, Terraform, Gitlab, Jenkins, PostgreSQL, AWS, Azure, NPM, JSON, JSON Schema, Markdown, RxJS, HTML, CSS, Git, GitHub, and Unix/Linux.

Requirements:

• Must be a US Citizen with the ability to obtain a Public Trust clearance.
• Ten (10) total years in engineering, computer science, or related field, with two (2) years of hands-on experience supporting DevSecOps to build and automated software development processes.
• Knowledge of institutionalizing Agile and DevSecOps toolkits not limited to but including: Ansible, Jenkins, GitLab, Artifactory, Jira, Terraform, Version Control Software, or comparable technologies.
• Familiarity with information security frameworks and standards (SAST, DAST, IAST, RASP).
• Familiarity with Threat modeling, Static Analysis Tools, and Risk Assessment Techniques.
• Strong understanding of cloud computing platforms (e.g., AWS, Azure, GCP) and experience with cloud security best practices.
• Excellent communication and collaboration skills, with the ability to work effectively in a fast-paced, dynamic environment.
• Hands-on source code management tools like Git.
• AWS Cloud certifications.

T-Rex is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, sex (including pregnancy, gender identity, and sexual orientation), parental status, national origin, age, disability, family medical history or genetic information, political affiliation, military service, or other non-merit based factors.