Cloud Security Engineer (DevOps)

Cybersecurity Jobs; Westminster (CO); On-site; USD 135,000 - 165,000; Full time

Job summary

Liberty Personnel Services, Inc. in Westminster, CO is seeking a security-focused DevOps engineer to design, implement, and maintain security applications and services in a cloud environment.

You will operate CI/CD practices to embed security into release workflows, troubleshoot infrastructure issues, and monitor security tooling and metrics. The role requires US citizenship with SECRET clearance and ability to obtain TS/SCI with CI Polygraph.

Qualifications

• U.S. citizen with SECRET clearance
• Ability to obtain TS/SCI access with CI Polygraph
• CompTIA Security+ or DoDD 8140 certification
• 5+ years of DevOps, software, or infrastructure engineering experience
• Bachelor’s degree or 4 additional years of experience in lieu of degree
• Cloud service experience
• Experience with Terraform and Kubernetes (K8S) or equivalent technologies
• Ability to quickly learn and use a wide variety of open-source technologies
• Willingness to work 90% or as needed in a secure environment
• Willingness to provide some on-call or after-hours onsite support
• Role is based in Colorado (Westminster or Longmont)

Responsibilities

• Design, implement, and maintain multiple security applications and services in a cloud-based environment
• Operate in CI/CD practices to embed security into release and deployment workflows
• Troubleshoot and resolve network, pipeline, and infrastructure issues affecting security services
• Build, maintain, and monitor the configuration of security tools
• Develop security monitoring, alerting, and metrics using log aggregators and data collectors
• Serve as a collaborative bridge between security-focused and development-focused teams
• Provide configuration management support for production applications and custom code
• Deliver vulnerability management support across applications and infrastructure
• Learn and apply a wide range of open-source technologies to address security problems
• Support automation around security tooling and cloud security controls
• Contribute to secure infrastructure design across the enterprise
• Provide some on-call or after-hours onsite support in a secure environment as needed for the customer’s mission

Skills

DevOps

Security

CI/CD

Python

Java

Terraform

Kubernetes (K8S)

Jenkins

AWS

Open-source technologies

Monitoring

Vulnerability management

Education

Bachelor’s degree

4 additional years of experience in lieu of degree

Tools

Terraform

Kubernetes (K8S)

Jenkins

AWS

Job description

Liberty Personnel Services, Inc, LP89679 offers the opportunity to build security into modern cloud delivery at the application and infrastructure level. This onsite role in Westminster, CO 80234 supports a continuously deployable and continuously secure environment, with ownership of security applications, services, and the pipelines that move code to production. The position is offered at $150,000 per year.

What you’ll be responsible for

• Design, implement, and maintain multiple security applications and services in a cloud-based environment
• Operate in CI/CD practices to embed security into release and deployment workflows
• Troubleshoot and resolve network, pipeline, and infrastructure issues affecting security services
• Build, maintain, and monitor the configuration of security tools
• Develop security monitoring, alerting, and metrics using log aggregators and data collectors
• Serve as a collaborative bridge between security-focused and development-focused teams
• Provide configuration management support for production applications and custom code
• Deliver vulnerability management support across applications and infrastructure
• Learn and apply a wide range of open-source technologies to address security problems
• Support automation around security tooling and cloud security controls
• Contribute to secure infrastructure design across the enterprise
• Provide some on-call or after-hours onsite support in a secure environment as needed for the customer’s mission

Key areas you will work on

• Cloud-based security applications and services
• Enterprise common infrastructure and shared services
• CI/CD-driven environments and automated pipelines
• Security tooling configuration, tuning, and monitoring
• Log aggregation, alerting, and security metrics
• Configuration and vulnerability management for production apps
• Custom application and code security support

Requirements

• U.S. citizen with an existing SECRET security clearance
• Ability to obtain TS/SCI access with CI Polygraph
• CompTIA Security+ or other DoDD 8140 certification
• 5+ years of DevOps, software, or infrastructure engineering experience
• Bachelor’s degree (or 4 additional years of experience in lieu of degree)
• Cloud service experience
• Experience with Terraform and Kubernetes (K8S) or equivalent technologies
• Ability to quickly learn and use a wide variety of open-source technologies
• Willingness to work 90% or as needed in a secure environment
• Willingness to provide some on-call or after-hours onsite support
• Role is based in Colorado (Westminster or Longmont)

Technologies you’ll use

Terraform, Kubernetes (K8S), open-source tools, cloud services, CI/CD platforms, log aggregation, monitoring and alerting, configuration and vulnerability management, Python, Java, Jenkins, AWS, compliance tooling, vulnerability detection tools, intrusion detection and prevention tools, and change management and detection tools, code analysis tools. Counterintelligence polygraph is listed as part of the clearance path.

Experience that will stand out

• Security-minded DevOps engineer (or DevOps-minded security engineer) building automation around monitoring, compliance, and vulnerability detection in a cloud environment
• Experience turning logs and metrics into actionable security posture, not only dashboards
• Hands-on with CI/CD (including Jenkins)
• Scripting in Python or Java
• Automated deployment and ongoing maintenance of security tools for monitoring, intrusion detection/prevention, change detection, code analysis, and more

High-signal additions

• AWS certification or other cloud provider certification
• Jenkins or similar CI/CD tools
• Python and Java
• Terraform and Kubernetes
• Monitoring tools, compliance tooling, vulnerability detection tools, intrusion detection and prevention tools, change management and detection tools, and code analysis tools
• Custom source application development and maintenance