DevSecOps Engineer

Staffing Spot, Inc.; York (York County); Vor Ort; USD 140.000 - 190.000; Vollzeit

Zusammenfassung

Staffing Spot, Inc. is seeking a DevSecOps Engineer in the United States with 7+ years of hands-on DevSecOps experience in AI/ML or data-intensive systems.

You will secure CI/CD pipelines, container environments, and cloud deployments across AWS/Azure/GCP, while integrating security tools and automating tests. You will drive Zero Trust implementations, manage ATO processes, and ensure compliance with NIST 800-53, RMF, FedRAMP, ISO 27001, SOC 2, and PCI DSS.

Qualifikationen

• Bachelor's in CS or related field or equivalent experience.
• 7+ years in DevSecOps for AI/ML or data-intensive systems.
• Familiar with OpenShift or Kubernetes security hardening.
• Knowledge of Zero Trust Architecture concepts.
• Experience managing ATO processes.
• Expertise with DevSecOps tools, practices, and frameworks.
• Strong security standard knowledge (NIST 800-53, RMF, FedRAMP).
• Cloud experience (AWS/Azure/GCP) and containerization (Docker/ Kubernetes).
• Scripting skills (Python, Bash or similar).
• Active security clearance or eligibility.

Aufgaben

• Design, implement, and maintain secure CI/CD pipelines.
• Integrate security tools into DevOps workflows and automate security testing.
• Perform vulnerability scanning, SAST, DAST, SCA, and container image scanning.
• Implement IaC security using Terraform, Checkov, or similar tools.
• Hands-on CI/CD pipeline development and automation.
• Secure container environments with Docker, Podman, or CRI-O.
• Enforce IAM, RBAC, least-privilege access and policy-as-code.
• Monitor security events and coordinate remediation with teams.
• Collaborate with development, operations, and security for compliance.
• Support standards like ISO 27001, SOC 2, and PCI DSS.

Kenntnisse

Leadership

Communication

Scripting

Cloud security

Ausbildung

Bachelor's in CS or related field

Tools

OpenShift

Kubernetes

Terraform

Checkov

Docker

Podman

CI/CD tools

SAST/DAST tools

IAM/Policy-as-code

Jobbeschreibung

Role: DevSecOps Engineer

We're looking for a candidate who is a U.S. citizen and resides in the contiguous United States. You'll be a W-2 employee, and we do not accept third-party applications.

Key Responsibilities

• Bachelor's degree in Computer Science or related field (or equivalent experience).
• 7+ years of hands-on experience with DevSecOps in AI/ML or data-intensive systems.
• Familiarity with OpenShift or Kubernetes security hardening.
• Knowledge of Zero Trust Architecture (ZTA) concepts.
• Proven experience managing and driving successful ATO processes.
• Expertise with DevSecOps tools, practices, and frameworks.
• Strong understanding of federal security compliance standards (e.g., NIST 800-53, RMF, FedRAMP)
• Hands-on experience with cloud environments (AWS, Azure, or GCP) and containerization (Docker, Kubernetes).
• Strong scripting and automation skills (Python, Bash, or similar).
• Excellent leadership, communication, and documentation abilities.
• Active security clearance or eligibility to obtain one
• Design, implement, and maintain secure CI/CD pipelines.
• Integrate security tools into DevOps workflows and automate security testing.
• Perform vulnerability scanning, SAST, DAST, SCA, and container image scanning.
• Implement Infrastructure as Code (IaC) security using Terraform, Checkov, or similar tools.
• Hands-on experience with CI/CD pipeline development and automation.
• Experience with container technologies including Docker, Podman, or CRI-O.
• Experience with Kubernetes, OpenShift, or similar orchestration platforms.
• Experience working within AWS cloud environments.
• Proficiency in at least two programming or scripting languages such as Python, Java, Node.js, Go, .NET/C#, Bash, or PowerShell.
• Secure cloud environments across AWS, Azure, or GCP.
• Implement container and Kubernetes security best practices.
• Manage secrets, certificates, encryption, and access controls.
• Implement IAM, RBAC, least-privilege access, and policy-as-code.
• Monitor security events, investigate vulnerabilities, and support remediation.
• Collaborate with development, operations, and security teams to enforce compliance.
• Support security standards and compliance requirements such as ISO 27001, SOC 2, and PCI DSS.

Skills: openshift,devsecops,ci/cd pipeline,kubernetes,devops,aws,docker,podman