Senior DevSecOps Architect: Cloud, CI/CD & Security

Steampunk; McLean (VA); On-site; USD 150,000 - 185,000; Full time

Job summary

Steampunk is seeking a Senior DevSecOps Engineer to join our growing practice, delivering cloud and application development features. You will lead DevSecOps activities, automate build/release processes, and integrate security testing across CI/CD pipelines.

You should have 10+ years total experience, hands-on expertise with AWS/Azure/GCP, Docker/Kubernetes, and IaC, and be prepared to mentor teammates while coordinating with client stakeholders.

Qualifications

• Ability to obtain and maintain a U.S. government security clearance.
• Bachelor's degree and 10+ years of total experience.
• 5 years of experience with one or more cloud platforms (i.e., AWS, Azure, or GCP).
• 5 years of experience with source code management (SCM) platforms, including GitLab.
• 5 years of experience with one or more programming or scripting languages.
• 5 years of application DevSecOps experience with hands-on development experience in an Agile environment.
• 3 years of experience building and deploying Docker containers and utilizing platforms such as Kubernetes.
• 5 years of experience implementing infrastructure as code and orchestration.
• 5 years of experience building CI/CD pipelines with tools such as Jenkins, GitLab CI/CD, GitHub Actions, CircleCI, or Travis CI.
• 5 years of experience integrating deployments with industry-standard DevSecOps tooling and orchestration.
• Experience integrating test automation, including performance, security, and functional tests, into CI/CD pipelines.
• Experience with Static Application Security Testing (SAST) and integrating security scanning into development and CI/CD processes.
• Experience with Wiz, Palo Alto Cortex, or similar cloud security tools.
• Experience providing technical leadership and mentorship to engineering teams.
• Demonstrated ability to work independently, take initiative, and drive technical efforts with minimal oversight.
• Experience fostering collaboration and communication across technical teams and client stakeholders.
• Excellent written and verbal communication, interpersonal, and collaborative skills.

Responsibilities

• Establish automation tools and infrastructure for automation.
• Understand the needs of stakeholders and effectively convey requirements to developers and technical teams.
• Automate and improve development, testing, deployment, and release processes.
• Test and examine code written by others and analyze results.
• Ensure systems are safe and secure against cybersecurity threats.
• Identify technical problems, perform root cause analysis, and develop software updates and fixes.
• Work with software developers and engineers to ensure development follows established processes and works as intended.
• Support enterprise cloud applications and infrastructure through infrastructure as code, including automated server and network configurations, large-scale software deployments, monitoring, testing, and CI/CD.
• Integrate security testing and scanning into development and CI/CD processes using SAST and other application security tools.
• Document the as-is state of the environment, perform gap analyses, and produce artifacts that articulate options and recommendations.
• Leverage virtualization and containerization to optimize and modernize software systems.
• Provide technical leadership and mentorship to team members, supporting effective delivery and knowledge sharing across the team.
• Foster cross-team collaboration and communication across the client organization to align technical efforts, resolve dependencies, and support successful delivery.
• Engineer and implement solutions and provide recommendations for continuous improvement of the services provided.
• Present regular status updates and provide cross-training to other DevSecOps team members.

Skills

AWS

Azure

GCP

GitLab

Docker

Kubernetes

CI/CD

SAST

IaC

Automation

Leadership

Security testing

Education

Bachelor's degree

Tools

Concourse

Bash

PowerShell

Python

Groovy

Ruby

Job description

Steampunk is seeking a Senior DevSecOps Engineer to join our growing practice, delivering cloud and application development features. You will lead DevSecOps activities, automate build/release processes, and integrate security testing across CI/CD pipelines.

You should have 10+ years total experience, hands-on expertise with AWS/Azure/GCP, Docker/Kubernetes, and IaC, and be prepared to mentor teammates while coordinating with client stakeholders.