DevSecOps Engineer Secret clearance - Leidos

OpenTalent; United States; On-site; USD 130,000 - 190,000; Full time

Job summary

OpenTalent is seeking a DevSecOps Engineer to design, implement, and enforce security solutions in alignment with security policy. You will provide oversight to changes in hardware, software, or network configuration and implement best practices in securing the infrastructure.

This role involves automating cybersecurity items, resolving system bugs, and delivering highly technical solutions using CI/CD tooling, Python automation, and orchestration technologies.

Qualifications

• Engineering degree and 8–12 years of relevant practical software/Linux and/or Windows system administration experience.
• Active and current Secret clearance.
• Hands-on experience developing and maintaining pipelines in Gitea, GitLab, or similar CI/CD platforms, automation design and implementation with Gitlab CI, ArgoCD, Flux, Terraform, Nexus Repository Manager, Artifactory, and release pipelines for CI/CD of production quality software.
• Hands-on experience with developing automation using Python, Linux shells, Windows PowerShell, Ansible, Terraform or equivalent languages.
• Experience remediating cyber related findings on Linux host baselines, Windows environments to include Active Directory implementation, and Group Policy definitions.
• Familiarity with network systems administration and STIG Implementation.
• Container technologies (e.g., Docker) and orchestration tools (e.g., Kubernetes, OpenShift) knowledge.
• Performance monitoring, logging, and alerting (e.g., Prometheus, Grafana, ALG Stack).
• Familiarity with a variety of DoD STIGs (Security Technical Implementation Guide).
• Experience with cyber tools: EvaluateSTIG, StigViewer, Security Center & Nessus (ACAS).
• Strong organizational, written, and oral communication skills.
• Active and current TS/SCI clearance.

Responsibilities

• DevSecOps Engineer design, implement, and enforce security solutions in alignment with security policy.
• DevSecOps Engineer provide oversight to changes in hardware, software, or network configuration and implement best practices in securing the infrastructure.
• Works on automation of cybersecurity items and system bug resolution as required.
• Implements highly technical solutions using various advanced technologies.

Skills

CI/CD pipelines

Python

Linux

Windows

PowerShell

Ansible

Terraform

GitLab

ArgoCD

Flux

Nexus

Artifactory

Release pipelines

Education

Engineering degree

Tools

Gitea

GitLab CI

ArgoCD

Flux

Terraform

Nexus Repository Manager

Artifactory

Job description

Primary responsibilities:

DevSecOps Engineer design, implement, and enforce security solutions in alignment with security policy.

DevSecOps Engineer provide oversight to changes in hardware, software, or network configuration and implement best practices in securing the infrastructure.

Works on automation of cybersecurity items and system bug resolution as required.

Implements highly technical solutions using various advanced technologies.

Required Qualifications:

An Engineering degree, 8 - 12 years of relevant practical software Linux and/or Windows system administration experience. Additional years of experience will be considered in lieu of degree.

Active and current Secret clearance.

Hands-on experience developing and maintaining pipelines in Gitea, GitLab, or similar CI/CD platforms, automation design and implementation with Gitlab CI, ArgoCD, Flux, Terraform, Nexus Repository Manager, Artifactory, and release pipelines for CI/CD of production quality software.

Hands-on experience with developing automation using Python, Linux shells, Windows PowerShell, Ansible, Terraform or equivalent languages.

Experience remediating cyber related findings on Linux host baselines, Windows environments to include Active Directory implementation, and Group Policy definitions.

Familiarity with network systems administration and STIG Implementation.

Additional Qualifications/Certifications

Container technologies (e.g., Docker) and orchestration tools (e.g., Kubernetes, OpenShift) knowledge.

Performance monitoring, logging, and alerting (e.g., Prometheus, Grafana, ALG Stack).

Familiarity with a variety of DoD STIGs (Security Technical Implementation Guide).

Experience with cyber tools:

• EvaluateSTIG, StigViewer
• Security Center & Nessus (ACAS)

Strong organizational, written, and oral communication skills.

Active and current TS/SCI clearance.

DABAOPP1