Engineer Testing

Dark Wolf; San Antonio (TX); On-site; USD 155,000 - 185,000; Full time

Job summary

Dark Wolf is seeking a DevSecOps Engineer to secure the SDLC and automate deployments. The role emphasizes CI/CD pipeline hardening, IaC, and security advisement across teams.

The engineer will work on securing automated pipelines and advise on best practices throughout the development process. Responsibilities include implementing secure CI/CD workflows, container orchestration with Docker/Kubernetes/ArgoCD on RHEL, and integrating security tooling.

Qualifications

• 12+ years of DevSecOps experience with Linux and containers.
• Expertise in implementing and managing CI/CD pipelines.
• High level experience with Docker and Kubernetes.
• Experience with GitLab CI/CD.
• IaC knowledge with Ansible and Terraform.
• Experience with storage and artifact repos (MinIO, Nexus, S3).
• Familiarity with monitoring tools (Grafana, Kibana, Prometheus).
• Experience with security scanning tools (Anchore, NeuVector, SonarQube, Twistlock).
• Secrets management with Vault and SOPS.
• US Citizen with active Secret clearance.

Responsibilities

• Secure and improve applications using GitLab CI/CD; review pipeline security scans and harden web apps.
• Support certificate-to-field processes for the customer platform using secure development practices.
• Familiar with Platform One BigBang services and technologies.
• Work within Agile frameworks (Scrum/Kanban) using Jira/Confluence.
• Deploy and manage containerized apps with Docker, Kubernetes and ArgoCD on RHEL.
• Utilize IaC tools like Ansible and Terraform.
• Manage storage and artifacts with MinIO, Nexus and S3 solutions.
• Monitor system performance with Grafana, Kibana and Prometheus.
• Integrate security scanning tools like Anchore, NeuVector, SonarQube and Twistlock into CI/CD.
• Secure sensitive data with Vault and SOPS for secrets management.
• Understand PostgreSQL and other databases.
• Leverage languages (JavaScript, Bash, C++, Go, PHP, Python, Rust, TypeScript).
• Support various frameworks (Net, FastAPI, Flask, Flutter, Rails, React, Shiny, Vue).
• Use Gradle and Maven; manage dependencies with Npm, Yarn and Yum.

Skills

JavaScript

Bash scripting

C++

Go

PHP

Python

Rust

TypeScript

Tools

Docker

Kubernetes

ArgoCD

GitLab CI/CD

Ansible

Terraform

MinIO

Nexus

S3 solutions

Grafana

Kibana

Prometheus

Anchore

NeuVector

SonarQube

Twistlock/Prisma Cloud

HashiCorp Vault

SOPS

PostgreSQL

Job description

Job Description

Dark Wolf is seeking a DevSecOps Engineer to join our team and play a crucial role in securing our software development lifecycle (SDLC) using automation to support web application deployments. The candidate will be responsible for understanding and securing automated CI/CD pipelines, infrastructure as code (IaC), and advising other teams on security best practices across the entire pipeline development process. Our DevSecOps engineers are asked to solve challenging security problems for unique customers and have a direct impact on the direction of software products and solutions used by those customers.

Key Responsibilities

• Implement, secure, and improve applications using GitLab CI/CD, focusing on reviewing pipeline security scans and hardening of web applications.
• Support Certificate to Field granting to the customer's platform using knowledge of secure development practices.
• Familiar with Platform One BigBang services and technologies.
• Work within Agile frameworks such as Scrum and Kanban, utilizing Atlassian Jira and Confluence for project management and documentation.
• Understand how to deploy and manage containerized applications using Docker, Kubernetes, and ArgoCD on Red Hat Enterprise Linux environments.
• Be familiar with Infrastructure as Code (IaC) tools like Ansible and Terraform.
• Manage storage and artifact repositories using MinIO, Nexus, and S3 solutions.
• Be acquainted with monitoring system performance with tools like Grafana, Kibana, and Prometheus.
• Integrate and manage security scanning tools like Anchore, NeuVector, SonarQube, and Twistlock (Prisma Cloud) into the CI/CD pipeline to identify and mitigate vulnerabilities.
• Secure sensitive data using HashiCorp Vault and SOPS Encryption for secrets management.
• Understand PostgreSQL and other database technology.
• Familiarity in various programming languages, including JavaScript, Bash Scripting, C++, Go, PHP, Python, Rust, and TypeScript.
• Work with multiple frameworks and libraries such as .Net, FastAPI, Flask, Flutter, Rails, React, Shiny, and Vue to support web application deployments.
• Utilize build tools like Gradle and Maven, along with package managers such as Npm, Yarn, and Yum, to manage dependencies and automate builds.

Required Qualifications

• ~12+ years of proven experience in DevSecOps, with a strong background in Linux and container technologies.
• ~ Expertise in implementing and managing CI/CD pipelines.
• ~ High level of experience with containerization technologies (Docker, Kubernetes).
• ~ Experience working with CI/CD tools (GitLab CI/CD).
• ~ Expertise in working with IaC tools (Ansible, Terraform).
• ~ Knowledge of storage and artifact repositories (MinIO, Nexus, S3).
• ~ Familiarity with monitoring tools (Grafana, Kibana, Prometheus).
• ~ Experience with security scanning tools (Anchore, NeuVector, SonarQube, Twistlock).
• ~ Experience applying security remediations to systems and software.
• ~ Experience with secrets management tools (HashiCorp Vault, SOPS).
• ~ US Citizen and an active Secret security clearance

Desired Qualifications

• Familiarity with programming languages (e.g., Python, Go, Bash) and frameworks/libraries (e.g., .Net, React, Rails).
• Familiarity with build tools (e.g., Gradle, Maven) and package managers (e.g., Npm, Yarn, Yum).
• Experience with databases (PostgreSQL).

This position is located in San Antonio, TX.

The estimated salary range for this position is $155,000.00 - $185,000.00, commensurate on experience and technical skillset.

We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories.

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire. We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.