This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
StraitSys is looking for a DevSecOps Engineer with AWS experience to support the Federal Bureau of Investigation (FBI). The DevSecOps Engineer will meet the needs of our software development lifecycle. This role will use technical skills for the design and implementation of various CI/CD patterns while abiding by industry standards and policies. Often taking part in design and code reviews and offering direction to ensure project scoping activities match architectural goals and specifications. When new applications are introduced or current ones undergo changes, the DevSecOps Engineer will frequently work with partners in other divisions to provide build solutions. Other responsibilities include documenting DevSecOps processes and ensuring that the DevSecOps platforms are up to date and properly maintained. The DevSecOps Engineer will have a significant impact on the team as a member in charge of the enterprise’s engineering and maintenance.
Job Responsibility:
Create, develop, and implement solutions to address infrastructure and security requirements
Identify the needs for build automation, designing, and implementing CI/CD solutions
Consult on DevSecOps requirements from diverse application/line of business partners
Create plug-and-play/reusable solutions and patterns for CI/CD pipelines
Create, develop, and implement automation and system integration for various build platforms
Publish and disseminate CI/CD best practices, patterns, and solutions
Ensure that the service’s uptime and response time SLAs/OLAs are met or surpassed
Build or maintain CI/CD building blocks and shared libraries proactively for app and development teams to enable quicker build and deployment
Design action plans to address CICD platform/tools/solutions’ shortcomings and difficulties
Actively participate with team members and contractors/vendors to prevent or quickly address problems
Troubleshoot, identify, and fix problems in the DevSecOps domain
Ensure incident tracking tools are updated in accordance with established norms and processes, gather all essential data and document any discoveries and concerns
Identify management concerns and problems, assess them, and offer prompt solutions and/or escalation
Align with technological Systems/Software Development Life Cycle (SDLC) processes and industry-standard service management principles (such as ITIL)
Create and publish engineering platforms and solutions
Requirements:
Active Top Secret Clearance
Bachelor’s or master’s degree in engineering, Computer Science, Information Systems, Cloud Computing, or related technical discipline (education substitution requires 9+ years’ proven specialized experience)
5+ years specialized experience managing IT systems with system architecture frameworks and cloud environment considerations
Must be a US Citizen
Ability to successfully pass a pre-employment drug test
Nice to have:
Comprehensive technical expertise in a variety of DevSecOps toolkits, including Ansible, Jenkins, Artifactory, Jira, Black Duck, Terraform, Git/Version Control Software, or comparable technologies
Familiarity with information security frameworks and standards
Knowledge of DevOps Automation (TerraFrom, GitLab, GitHub, GitHub Actions)
Knowledge of Prisma cloud, SIEM, SOC, Nesus, Crowd strike or similar services
Familiarity with API Security, Container Security, AWS Cloud Security
Familiarity with Amazon AWS policy, configuration, and security management tools
Proven capacity for thinking leadership and a highly creative problem-solver
Excellent analytical and interpersonal skills
Ability to express technical information clearly at different organizational levels
Knowledge of PCI-DSS, HIPPA, SOX, GDPR, and CCPA Standards and Policies and the associated certification and audit processes
CISM, CISSP or other Security Certifications
Auditing and Compliance Certifications such as CISA, PCI-ISA, and PCIP
Experience with infrastructure as code (IaC) tools (Puppet, Ansible, AWS CloudFormation or equivalent)
Strong understanding of cloud computing platforms (AWS, Azure) and infrastructure services
Demonstrated experience using AWS to include S3, EC2, SNS, SQS, and Lambda
Experience with PowerShell or other scripting languages like Bash
Experience with aws-cli (and other container images) as it relates to automation within CI/CD pipelines
Experience with industry standard Static Code Analysis (SCA) tools such as SonarQube, Nexus IQ Server, Fortify, JFrog Artifactory
Prefer at least one of the following certifications: Certificate of Cloud Security Knowledge (CCSK), Amazon Web Service (AWS) Solutions Architect - Associate, Microsoft Certified: Azure Fundamentals, Google Associate Cloud Engineer, or other certifications exemplifying skill sets needed to manage IT systems in the cloud