DevSecOps Engineer

Integrated Solutions for Systems, Inc.; Auburn (AL); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Competitive salary with comprehensive,

health and wellness benefits

Employee ownership

401(k) retirement plan

Tuition Assistance, Training, and edu.

Job summary

Integrated Solutions for Systems (IS4S) in Auburn, AL is seeking a DevSecOps Engineer to support DoD programs, enabling Command and Control, Fires, and Electromagnetic Warfare technologies for warfighters.

You will join a multidisciplinary team to design, develop, integrate, and deploy secure solutions, owning tasks and responsibilities in a dynamic environment.

Qualifications

• Bachelor’s degree or higher in engineering, computer science, or related technical field.
• Experience with DevSecOps pipelines using GitLab, AWS, and Azure.
• Experience with SAST, DAST, SCA, and DCA.
• Containerization knowledge with Docker and Kubernetes.
• Programming in C++, Go, Bash, Java, and JavaScript; Unix administration.

Responsibilities

• Assisting with architecture, design, development, integration, testing, and deployment.
• Creating pipelines to automate testing and deployment.
• Maintaining strong cybersecurity posture with modern tools and practices.
• Identifying vulnerabilities and managing remediation and POAMs.
• Integrating security, encryption, access management, and logging into products.
• Adhering solutions to STIGs and DoD cybersecurity guidelines.
• Developing and maintaining cybersecurity artifacts (scans, SBOMs, diagrams).
• Communicating with customers, stakeholders, and partner companies.

Skills

DevSecOps

GitLab

AWS

Azure

SAST

DAST

SCA

DCA

Docker

Kubernetes

CI/CD

C++

Go

Bash

Java

JavaScript

Unix

Education

Bachelor’s degree or higher in engineering, computer science, or related technical field

Tools

GitLab

AWS

Azure

Docker

Kubernetes

Job description

Job Title: DevSecOps Engineer

Company Overview: Integrated Solutions for Systems (IS4S) is a fast-growing small business at the forefront of developing innovative solutions for the warfighter. We use applied research and development combined with novel systems integration to enhance capabilities of our armed forces.

Position

DevSecOps Engineer

Location

Auburn, AL; Aberdeen, MD

Job Type

Full-time

Job Description

IS4S is seeking a DevSecOps Engineer in Auburn, AL to assist development enabling Command and Control (C2), Fires, and Electromagnetic Warfare (EW) technologies for the DoD. The person or persons filling this position will integrate into an existing, multi-disciplinary team to create, develop, integrate, and deploy solutions used by warfighters. The challenges facing our nation are constantly evolving. Therefore, we are looking for self-driven, entrepreneurial team members willing and able to constantly learn, adapt, and find ways to develop and integrate solutions. Selected applicants will be expected to gain familiarity with the underlying domain (e.g., EW, Fires) and its role in the larger system of systems to incorporate warfighter needs throughout the solution. They will be given freedom to solve problems and develop solutions with the expectation of owning their tasks and responsibilities. They will also integrate into an existing team that provides support and to ensure designs and solutions conform to and enhance the end product.

Responsibilities

• Assisting with architecture, design, development, integration, testing, and deployment
• Creating pipelines to automate testing and deployment
• Maintaining a strong cybersecurity posture while incorporating modern development tools and practices
• Identifying vulnerabilities, real or perceived, adjudicating them, and either explaining false positives or developing a Plan of Action and Milestones (POAM)
• Integrating security and compliance into products, including encryption, access management, and system logging
• Adhering solutions to DoD Security Technical Implementation Guides (STIGs)
• Develop and maintain cybersecurity artifacts (scan results, POAMs, SBOMs, system diagrams, etc.)
• Communicating and interacting with customers, stakeholders, and other companies

Required Abilities, Experience, and Skills

• Bachelor’s degree or higher in engineering, computer science, or related technical field (for full-time applicants)
• In pursuit of a Bachelor’s degree or higher in engineering, computer science, or related technical field (for part-time applicants)
• Experience developing, testing, and delivering applications within a DevSecOps framework including proficiency with common platforms and environments such as GitLab, AWS, Azure, etc.
• Experience with software deployment processes, including packaging, configuration, and release to production or test environments
• Experience with SAST, DAST, SCA, and DCA
• Ability to understand CVEs, develop and implement mitigations, and communicate false positives
• Understanding of containerization and containerized deployment (e.g., Docker, Rancher, Kubernetes, etc.)
• Experience with programming and scripting languages (e.g., C++, Go, Bash, Java, Javascript)
• Understanding of Unix system administration
• Ability to work independently, take initiative, and manage tasks with minimal direction
• Must be able to travel to support customer engagements, integration and testing in live environments, occasionally working non-standard hours to match exercise schedules
• Must be able to lift and carry computing and networking equipment in support of transit and installation
• Possess strong written and verbal communication skills
• US Citizenship is required

Desired Experience and Skills

• In-depth knowledge of NIST 800, CMMC, DoD DISA IL-4/5/6
• Knowledge of authentication and authorization protocols (e.g., SAML, OAuth, OIDC) and access control methods (PKI, MFA, ABAC)
• Understanding of the operational requirements for systems functioning in DIL/Tactical Edge environments
• In-depth knowledge of containerized deployment using Kubernetes and Helm
• Familiarity Apollo and Rubix
• Exposure to distributed systems, microservices architectures, or high-availability systems
• Experience with Mission Command or C2 systems, especially those dealing with Fires and Electromagnetic Warfare

Benefits Summary

• Competitive salary with comprehensive health and wellness benefits
• Dynamic and collaborative work environment
• Employee ownership
• Medical, dental, and vision care plans
• Paid time-off and parental leave programs
• Group term life insurance
• 401(k) retirement plan
• Tuition Assistance, Training, and education development offerings