DevSecOps Engineer/Configuration Manager - (TS/SCI REQUIRED)

Type of Requisition: Regular

Clearance Level Must Currently Possess: Top Secret/SCI

Clearance Level Must Be Able to Obtain: Top Secret/SCI

Suitability: DHS EOD

Public Trust/Other Required:

Job Family: Cloud

Job Qualifications:

Skills: Cloud DevOps, Cloud Software, Cybersecurity, DevSecOps

Certifications:

Experience: 5 + years of related experience

US Citizenship Required: Yes

Job Description:

Seeking a DevSecOps engineering professional to help identify critical data flows between microservices and find vulnerabilities within a cloud environment for a large government agency. The DevSecOps engineer will assist with end-to-end technical planning, implementation, deployment, security, operation and enhancement of complex systems. Position requires a strong background in cybersecurity software, threat modelling and risk assessments to detect and analyze threats.

Duties:

1. Stay current with the latest application security knowledge and security trends to continuously improve internal processes;
2. Instill and foster adoption of DevSecOps practices through productive engagement with the engineering teams;
3. Assist in the development of security operations for monitoring, testing, auditing, and regulatory compliance;
4. Identify security threats by conducting continual monitoring, penetration testing, vulnerability assessments, and audit log analysis;
5. Build, maintain and communicate the overall security integrity of the cloud environments;
6. Remediate identified vulnerabilities;
7. Conduct internal security audits and execute remediation plans;
8. Protect assets spanning across infrastructure, platform, CI/CD pipelines and applications;
9. Deploy and administer security monitoring tools for the SecOps team, and perform frequent risk assessments;
10. Collaborate with engineers to build a continuous delivery environment that will support the technical needs of our roadmap;
11. Conduct incident response activities ranging from containment to remediation and lessons learned;
12. Design and implement mechanisms that efficiently identify and mitigate security risks within the existing DevOps workstreams;
13. Work with development teams to improve the secure software development lifecycle.

Skills and Experience:

1. Experience working in defense or intelligence community Cloud environments, including AWS GovCloud and C2S
2. Knowledge of the DevOps principles and knowledge of automation software commonly used on DevOps projects.
3. An understanding of programming languages such as Python, Java, Ruby, Perl, and PHP.
4. Knowledge of AWS, Docker, Kubernetes, and how to implement developer tools such as GitHub and Dependency management.
5. Broad understanding of security control techniques and application in a traditional IT environment and cloud-based systems;
6. Ability to assess and analyze a wide range of information to draw conclusions on improvements to the security of systems.
7. Understanding of security considerations around RESTful APIs.
8. Strong teamwork and communication skills.
9. Knowledge of threat modelling and risk assessment techniques.
10. Current knowledge of cybersecurity threats, current best practices and latest software.
11. Experience as an IT security professional.
12. Degree in computer science, cybersecurity, math, engineering or science.
13. Practical industry standard certification, such as that offered by Microsoft, CompTIA, Cisco or Certified Ethical Hacker (CEH).
14. Accredited DevOps qualifications or DevSecOps Engineering (DSOE) qualifications.

Preferred:

1. 4-6 years of overall experience, to include a minimum of 3 years of enterprise understanding of the methods of technical attack and how these can be detected in a digital environment.
2. Able to communicate technical issues to technical and non-technical audiences.
3. Ability to multi-task on multiple projects in a fast-paced environment; able to manage project tasks, scope change, and schedules to keep projects on-track.
4. Relevant hands-on and implementation experience in software development, network security, recognizing the security threats, and configuring the network infrastructure.
5. Knowledge of the implementation of risk assessment techniques and the latest security best practices.

Scheduled Weekly Hours: 40

Travel Required: None

Telecommuting Options: Hybrid

Work Location: USA DC Washington

Additional Work Locations:

We are GDIT. A global technology and professional services company that delivers consulting, technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 30 countries worldwide, offering leading capabilities in digital modernization, AI/ML, Cloud, Cyber and application development. Together with our clients, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology. We connect people with the most impactful client missions, creating an unparalleled work experience that allows them to see their impact every day. We create opportunities for our people to lead and learn simultaneously. From securing our nation’s most sensitive systems, to enabling digital transformation and cloud adoption, our people are the ones who make change real. GDIT is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status, or any other protected class.