Associate / Sr Staff DevSecOps Engineer
SciTec
- Boulder, CO
- Permanent
- Full-time
- Manage integration, security scanning, and deployment of multiple applications into orchestrated frameworks.
- Work with deployment teams to orchestrate deployments to development, test, and operational environments.
- Create, maintain, and improve Continuous Integration (CI) pipelines in gitlab-ci.
- Monitor CI pipelines for performance and resolve observed or reported issues.
- Implement and maintain version promotion of one or more applications within CI pipelines.
- Integrate CI pipelines with development tools for artifact management, software test, software quality assessment, etc.
- Implement Continuous Delivery and execute automated or manual deployments of applications into orchestrated k8s environments.
- Execute checkout and troubleshooting of deployed applications within development and production environments.
- Execute software release processes including release branch creation, integration, checkout and test.
- Implement and maintain Helm charts.
- Ensure cybersecurity protocols are followed.
- Other duties as assigned.
- At least two years of professional experience building and executing DevOps or DevSecOps solutions using Continuous Integration / Continuous Deployment (CI/CD).
- Strong experience designing and developing application container deployment solutions using Docker, docker-compose, Kubernetes, etc.
- Experience with Amazon Elastic Kubernetes Service (EKS)
- Experience with Istio service mesh as well as Prometheus and Grafana
- Strong experience maintaining deployment environments for development, test and production
- Experience with authentication technologies, such as Keycloak
- At least one year of professional experience using Python3
- At least one year of professional experience using Linux operating systems
- A bachelor’s degree in computer science, engineering, mathematics, or physical sciences
- The ability to obtain and maintain a DoD security clearance
- Ability to work 100% on-site
- Detail oriented
- Good verbal and written communication skills
- Strong experience with software vulnerability scanning with static and dynamic code analysis
- Experience with software vulnerability assessment and remediation using SAST/DAST and tools like Sonarqube
- Strong experience with software package artifact management using JFrog Artifactory, Nexus or similar
- Development experience in Python, C++
- Experience with container security tools such as Grype, Syft
- Experience with version control using Git
- Systems and service administration in a Linux environment, including the installation and maintenance of applications supporting CI/CD like Gitlab, etc
- Employee Stock Ownership Plan (ESOP)
- 3% Fully Vested Company 401K Contribution (no employee contribution required)
- 100% company paid HSA Medical insurance, with a choice of 2 buy-up options
- 80% company paid Dental insurance
- 100% company paid Vision insurance
- 100% company paid Life insurance
- 100% company paid Long-term Disability insurance
- Short-term Disability insurance
- Annual Profit-Sharing Plan
- Discretionary Performance Bonus
- Paid Parental Leave
- Generous Paid Time Off, including Holiday, Vacation, and Sick Pay
- Flexible Work Hours