DevSecOps Engineer

DevSecOps Engineer

Job Description

Description
Candidate will help build GitLab-based DevSecOps automated pipelines into AWS gov cloud; support and enable application delivery times on CI/CD platform; manage and operate GitLab CI/CD.

Certification
GitLab certification desired but not required.
AWS certification desired but not required.

Knowledge, Skills and Experience

Version Control Systems
Proficiency with Git
Advanced knowledge of GitLab, including CI/CD pipelines, merge requests, and issue tracking
Familiarity with branching, promotion, and release strategies (such as SemRel)
Familiarity using internalized registries and repositories (Nexus dependency management, internal container registries, etc.)

CI/CD
GitLab CI/CD
GitLab runners (configuration and management)
GitLab components (Or generally developing and utilizing templates for CI/CD jobs in any platform, such as GitHub Actions)

Cloud Platforms
Demonstrated proficiency with AWS (Lambda, EC2, S3, EBS/EFS, ECS, EKS, SNS, CloudWatch)

Containerization
Docker (building, deploying, and managing containers)
Kubernetes (orchestration, deployment strategies, security, troubleshooting)
Container security best practices
Including container hardening strategies, such as maintaining a secure “golden” image
Deploying and managing container-based runners hosted on EKS
GitOps tools and deployment principles (such as ArgoCD/Flux)


Security Testing
Static Application Security Testing (SAST)
Dynamic Application Security Testing (DAST)
Interactive Application Security Testing (IAST)
Software Composition Analysis (SCA)
Container scanning tooling (Trivy, Prisma/Twistlock, Neuvector, etc..)

Infrastructure as Code (IaC)
Terraform (writing, managing, and optimizing Terraform configurations)
Other IaC tools (e.g., CloudFormation, Ansible)

Scripting and Programming
Proficiency in scripting languages (e.g., Python, Bash)
Basic to intermediate programming skills
Experience working with a Linux-based shell, managing way around a Linux-based system
Ability to work well in a paired programming environment at times

Automation
Creating and maintaining automated security checks and remediations
Integrating security into automated deployment processes
Incorporating linting tooling into development processes
Incorporating unit & performance testing into deployment processes

VIVA is an equal opportunity employer. All qualified applicants have an equal opportunity for placement, and all employees have an equal opportunity to develop on the job. This means that VIVA will not discriminate against any employee or qualified applicant on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status