Providing our customers with fast, efficient and reliable information systems and support services since 1997.
Senior DevSecOps Engineer
Location
California
Posted
107 days ago
Salary
$140K - $160K / year
Seniority
Senior
Job Description
Senior DevSecOps Engineer
Integrated Data Services
• Architecting and implementing secure CI/CD pipelines. • Managing Kubernetes clusters. • Deploying infrastructure as code using Terraform/OpenTofu. • Embedding security controls throughout the software development lifecycle. • Collaborating across development, operations, and security teams to build resilient, secure systems. • Expanding skill set by working with emerging security tools and implementing compliance-as-code frameworks.
Job Requirements
- 3+ years of experience in AWS cloud services (EC2, ECS/EKS, S3, Lambda, RDS, ALB, VPC, IAM) is required.
- 3+ years of experience in Container technologies (Docker and/or Podman) is required.
- 3+ years of experience in CI/CD pipelines (Jenkins, GitLab CI, GitHub Actions, or similar) is required.
- 3+ years of experience in Git version control and branching strategies is required.
- 2+ years of experience in Infrastructure as Code (Terraform and/or OpenTofu) is required.
- 2+ years of experience in Kubernetes orchestration (deployment, scaling, monitoring, troubleshooting) is required.
- 2+ years of experience in Configuration management (Ansible, Chef, or Puppet) is preferred.
- 2+ years of experience in Monitoring and observability (Prometheus, Grafana, ELK stack, CloudWatch) is preferred.
- 3+ years of experience in DevSecOps practices (security automation, shift-left security) is required.
- 2+ years of experience in Container security scanning (Trivy, Aqua, Twistlock, Anchore, or similar) is required.
- 2+ years of experience in Static/Dynamic Application Security Testing (SAST/DAST tools like SonarQube, Checkmarx, OWASP ZAP) is required.
- 2+ years of experience in Integrating security gates into CI/CD pipelines is required.
- 2+ years of experience in Secrets management (Vault, AWS Secrets Manager, or similar) is required.
- 2+ years of experience in Vulnerability management and remediation workflows is required.
- 1+ years of experience in Software Composition Analysis for dependency scanning (Trivy, Snyk, or similar) is preferred.
- 2+ years of experience in Security compliance frameworks (NIST, STIG, CIS benchmarks, FedRAMP) is required.
- 2+ years of experience in Security hardening and baseline configuration is required.
- 2+ years of experience in Audit logging and security event monitoring is required.
- 2+ years of experience in Identity and Access Management (IAM policies, RBAC) is required.
- 2+ years of experience in Network security (security groups, NACLs, WAF, network segmentation) is required.
- 1+ years of experience in Certificate management and PKI is required.
- 2+ years of experience in Security code review practices is preferred.
- 2+ years of experience in Container and Kubernetes security (Pod Security Standards, Network Policies, image signing) is preferred.
- 2+ years of experience in API gateway management is preferred.
- 1+ years of experience in ETL platforms (Talend and/or Apigee) is preferred.
- 3+ years of experience in Scripting languages (Python, Bash, or Go) is required.
- 3+ years of experience in YAML/JSON configuration is required.
- Must have security mindset and risk assessment thinking.
- Must have strong problem-solving and troubleshooting abilities.
- Must be able to balance security requirements with development velocity.
- Cross-functional collaboration with development and operations teams is required.
- Documentation and knowledge sharing is required.
- Communication of security risks to technical and non-technical stakeholders is required.
- Incident response and on-call readiness is required.
- Staying current with emerging security threats and vulnerabilities is required.
Benefits
- employer paid health, dental, vision, disability, AD&D and life insurance plans for eligible employees.
- flexible spending accounts.
- voluntary life insurance.
- supplemental insurance plans.
- eleven (11) paid holidays.
- generous PTO accruals starting at three (3) weeks per year.
- 401(k) safe harbor contribution upon eligibility.
- generous employee referral bonuses.
Related Guides
Related Categories
Related Job Pages
More DevOps Engineer Jobs
• Serves as an experienced individual contributor within a team • Responsible for supporting the goal of meeting scope, schedule and delivery requirements • Impacts the long-term goals of the program • Contributes to the development of the programs DevOps and software engineering strategy • Collaborates across teams to consolidate and simplify DevOps tools and services • Serves as a mentor to individuals within the team • Presents design documents, system diagrams, etc. to clients, stakeholders, partners, and other engineers • Capable of self-directed cloud infrastructure design and pipeline design • Builds libraries, modules, and packages for other infrastructure engineers • Develops CI/CD processes to help deliver software of higher quality at greater speed • Integrates tools to satisfy non-functional requirements • Proactively ensures that we are shipping software that meets security, SLA, and performance requirements • Participates in technical depth interviews with new candidates
• Staff DevOps Engineer serves as an emerging subject matter expert • With minimal oversight from leadership, you will be responsible for leading and monitoring the ability to meet scope, schedule and delivery requirements • Exhibits strong influential skills to represent the software engineering practice in planning sessions • You will serve as the primary lead and proactively communicate with stakeholders • Ensures processes and design provide robust defense-in-depth through security best-practices • Plans and executes migrations to cloud-native data services • Participates in technical depth interviews with new candidates
• DevOps Engineer III serves as an emerging individual contributor within a team • Expanding your leadership, guidance and mentoring skills • Responsible for supporting the goal of meeting scope, schedule and delivery requirements • Interact with stakeholders and utilize influential skills to drive improvements in DevOps processes and practices • Collaborate across teams to consolidate and simplify DevOps tools and services • Solve problems in ways that drive towards simplicity of architecture and operations • Complete cloud infrastructure and automated deployment tasks at the direction of a senior engineer • Build libraries, modules, and packages for other infrastructure engineers to integrate with their projects • Build cloud infrastructure that supports applications and improves the broader developer experience for engineers
Senior Site Reliability Engineer – HyperShift, Golang, OpenShift/AWS, Linux
Red HatThe leading provider of enterprise open source solutions.
• Develop, scale, and operate OpenShift managed cloud services. • Enable customer self-service, improve monitoring, and automate work. • Work with live systems and code automation. • Contribute code to increase the scalability and reliability of the service. • Contribute software tests and participate in peer review to increase code quality. • Help develop peers’ capabilities through knowledge sharing, mentoring, and collaboration. • Participate in a regular on-call schedule, including occasional paid weekends and holidays. • Practice sustainable incident response and blameless postmortems. • Resolve customer issues escalated from the Red Hat Global Support team. • Collaborate within a small agile team to develop and improve SRE software, support peers, plan and self-improve.
