DevSecOps Engineer

Emprise Corporation; Chesapeake (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Emprise Corporation is seeking a talented DevSecOps Engineer to join our team in Chesapeake, VA. The role serves as the central day-to-day integrator across Engineering, Systems Development, IT Operations and Security.

Responsibilities include designing secure testing environments, configuring web applications, managing deployments, and supporting RMF/ATO processes. Strong Java development, PKI, and CI/CD experience are required, with DoD clearance or eligibility.

Qualifications

• BS in an IT-related field or equivalent experience.
• 10+ years of Systems Integration/Development/Security/Operations experience.
• Strong fundamentals in full-stack systems integration and network operations.
• Expert-level Java development and associated frameworks/libraries.
• Experience with build/test/release management, automation, and security in CI/CD pipelines.
• Must be able to obtain DoD security clearance or already possess one.

Responsibilities

• Design and create standardized, secure testing environments and configurations.
• Support configuration for Apache Tomcat, Apache2, IIS, and various databases across environments.
• Provide full-stack application support with secure, error-free configurations.
• Coordinate external performance testing events in secure labs and with customers.
• Assist RMF/ATO processes and risk management activities.
• Lead PKI certificate deployment and manage vulnerabilities.
• Promote shift-left security and DevSecOps best practices.

Skills

Fullstack systems integration

Network operations

Java development

Public Key Infrastructure

CI/CD automation

Security processes

Git/Jenkins

Windows/Linux administration

Cloud environments AWS/Azure

DoD security clearance

Education

B.S. in IT-related field

Tools

NSIS

WiX

Tomcat

JDBC/ODBC

Tenable

Nexus

Fortify

SIEMs

Black Duck

OpenSSL

Job description

Emprise Corporation is a fast-growing company that has been serving government and commercial clients for over 38 years. We are the industry leader in Predictive Maintenance and Condition Monitoring by offering a wide set of capabilities that allow us to provide premier products and services that help our clients operate more effectively and efficiently. We’re looking for a talented DevSecOps Engineer to join our Team in Chesapeake, VA. Reporting to the CIO, this position will serve as the central day-to-day integrator across Engineering/ Operations, Systems Development, and IT Operations and Security.

Responsibilities

• Testing Environment Setup and Management o Design and create standardized, efficient, and securityfocused testing environments, developing and manual and automated testing configurations for internal and external systems.
• Provide setup, configuration, and support for various releases of Apache Tomcat, Apache2 and IIS configurations, Multiple Web applications, RDBMS’s with various database systems and versions. Understand the configurations and properties of each and the interaction required between application layers. o Support database configuration, administration, and content of databases for internal test platforms to mirror various remote customer sites’ configurations.
• Provide Full Stack Application support to ensure that all components are configured properly, and interactions are secure, error free and optimized. o Provide setup, configuration, and support for external performance testing events in secure labs. Includes event coordination and execution with customer personnel.
• Security and Risk Management o Provide support for Risk Management Framework (RMF), including Boundary Diagrams, Authority to Operate (ATO), and Ports Protocols Services Management (PPSM). Maintain a thorough knowledge of the content within.
• Technical Leadership in the creation, deployment, and management of PKI Certificates (DoD, Self-Signed, etc.) for both hardware and software environments. o Maintain awareness of vulnerabilities and security concerns of test and production environments, including internal code and its dependencies. Provide remediation support for issues as required.
• Provide input on best practices for Security and Operations in shift-left Development Process.
• Application and Device Deployment o Coordinate with internal development teams and thirdparty agents for packaging and testing software installations, patches and other distributions.
• Coordinate DevOps principles to develop standardized, secure, compliant and repeatable build pipelines, including server, application and database configuration and orchestration. o Manage and support application deployments to remote customer sites using delivery mechanisms such as: Proprietary Remote Transfer, Hard Copy (CD/DVD/etc.), and future deployment systems. Application deployments may occasionally require in person visit to a vessel for advanced environment validation or troubleshooting.
• Miscellaneous Day to Day o Create, update, and present product environment configurations and supporting systems.
• Collect and analyze server and application logs of various types both locally and remotely. Provide recommendations and potential corrective actions when problems are found.
• Communicate regularly with internal and customer points of contact (verbal and written).

Required Qualifications

• BS in an ITrelated field (or equivalent experience) and 10+ years of Systems Integration/Development/Security/Operations experience.
• Strong fundamentals in fullstack systems integration, network operations, Apache Tomcat and application server skills.
• Knowledge of Public Key Infrastructure and various authentication mechanisms
• Expertlevel development experience in Java and associated frameworks/libraries.
• Working experience with Windows installer packages (NSIS, WiX, etc).
• Experience with SQL at and RDBM concepts and integration, JDBC/ODBC.
• Experience with build/test/release management, general automation, and security processes in CI/CD pipeline.
• Extensive experience in tools such as: git, Jenkins, Tenable, Nexus, Fortify, SIEM’s, Black Duck etc.
• Experience in Systems Administration (Windows Server/Active Directory & Linux).
• Experience in hybrid and cloudbased environments, AWS, Azure.
• Ability to obtain and maintain a DoD Security Clearance .
• Strong verbal, written, and communication skills.
• Ability to occasionally support work onboard maritime vessel pier side.
• Security+ Certification or ability to acquire within 60 days.

Desired Qualifications

• Experience with Containers and VMs with regard to DevSecOps optimized environments.
• Familiarity in CMMC2.0, NIST 800171, Microsoft 365 GCCH, Purview, Azure, Intune.
• Experience with PowerShell, Linux and in one or more scripting languages (e.g., bash).
• Programming experience with Tomcat internals (e.g., Valves/Filters, etc.).
• Security configuration and operations experience with OpenSSL and Apache Tomcat tcnative.