Senior DevSecOps Engineer

Steampunk; McLean (VA); On-site; USD 150,000 - 185,000; Full time

Job summary

Steampunk is seeking a Senior DevSecOps Engineer to join our growing practice, delivering cloud and application development features. You will lead DevSecOps activities, automate build/release processes, and integrate security testing across CI/CD pipelines.

You should have 10+ years total experience, hands-on expertise with AWS/Azure/GCP, Docker/Kubernetes, and IaC, and be prepared to mentor teammates while coordinating with client stakeholders.

Qualifications

• Ability to obtain and maintain a U.S. government security clearance.
• Bachelor's degree and 10+ years of total experience.
• 5 years of experience with one or more cloud platforms (i.e., AWS, Azure, or GCP).
• 5 years of experience with source code management (SCM) platforms, including GitLab.
• 5 years of experience with one or more programming or scripting languages.
• 5 years of application DevSecOps experience with hands-on development experience in an Agile environment.
• 3 years of experience building and deploying Docker containers and utilizing platforms such as Kubernetes.
• 5 years of experience implementing infrastructure as code and orchestration.
• 5 years of experience building CI/CD pipelines with tools such as Jenkins, GitLab CI/CD, GitHub Actions, CircleCI, or Travis CI.
• 5 years of experience integrating deployments with industry-standard DevSecOps tooling and orchestration.
• Experience integrating test automation, including performance, security, and functional tests, into CI/CD pipelines.
• Experience with Static Application Security Testing (SAST) and integrating security scanning into development and CI/CD processes.
• Experience with Wiz, Palo Alto Cortex, or similar cloud security tools.
• Experience providing technical leadership and mentorship to engineering teams.
• Demonstrated ability to work independently, take initiative, and drive technical efforts with minimal oversight.
• Experience fostering collaboration and communication across technical teams and client stakeholders.
• Excellent written and verbal communication, interpersonal, and collaborative skills.

Responsibilities

• Establish automation tools and infrastructure for automation.
• Understand the needs of stakeholders and effectively convey requirements to developers and technical teams.
• Automate and improve development, testing, deployment, and release processes.
• Test and examine code written by others and analyze results.
• Ensure systems are safe and secure against cybersecurity threats.
• Identify technical problems, perform root cause analysis, and develop software updates and fixes.
• Work with software developers and engineers to ensure development follows established processes and works as intended.
• Support enterprise cloud applications and infrastructure through infrastructure as code, including automated server and network configurations, large-scale software deployments, monitoring, testing, and CI/CD.
• Integrate security testing and scanning into development and CI/CD processes using SAST and other application security tools.
• Document the as-is state of the environment, perform gap analyses, and produce artifacts that articulate options and recommendations.
• Leverage virtualization and containerization to optimize and modernize software systems.
• Provide technical leadership and mentorship to team members, supporting effective delivery and knowledge sharing across the team.
• Foster cross-team collaboration and communication across the client organization to align technical efforts, resolve dependencies, and support successful delivery.
• Engineer and implement solutions and provide recommendations for continuous improvement of the services provided.
• Present regular status updates and provide cross-training to other DevSecOps team members.

Skills

AWS

Azure

GCP

GitLab

Docker

Kubernetes

CI/CD

SAST

IaC

Automation

Leadership

Security testing

Education

Bachelor's degree

Tools

Concourse

Bash

PowerShell

Python

Groovy

Ruby

Job description

Overview

As a Senior DevSecOps Engineer, you will work with our growing DevSecOps practice delivering features to support cloud and application development. We are looking for a self-starter with experience in cloud platform services and DevSecOps practices such as build/release management, CI/CD practices, process automation, and application security. You will provide technical leadership while fostering collaboration and communication across teams and stakeholders throughout the client organization.

Contributions

• Establish development tools and infrastructure for automation.

• Understand the needs of stakeholders and effectively convey requirements to developers and technical teams.

• Automate and improve development, testing, deployment, and release processes.

• Test and examine code written by others and analyze results.

• Ensure systems are safe and secure against cybersecurity threats.

• Identify technical problems, perform root cause analysis, and develop software updates and fixes.

• Work with software developers and engineers to ensure development follows established processes and works as intended.

• Support enterprise cloud applications and infrastructure through infrastructure as code, including automated server and network configurations, large-scale software deployments, monitoring, testing, and CI/CD.

• Integrate security testing and scanning into development and CI/CD processes using SAST and other application security tools.

• Document the as-is state of the environment, perform gap analyses, and produce artifacts that articulate options and recommendations.

• Leverage virtualization and containerization to optimize and modernize software systems.

• Provide technical leadership and mentorship to team members, supporting effective delivery and knowledge sharing across the team.

• Foster cross-team collaboration and communication across the client organization to align technical efforts, resolve dependencies, and support successful delivery.

• Engineer and implement solutions and provide recommendations for continuous improvement of the services provided.

• Present regular status updates and provide cross-training to other DevSecOps team members.

Qualifications

• Ability to obtain and maintain a U.S. government security clearance.

• Bachelor's degree and 10+ years of total experience.

• 5 years of experience with one or more cloud platforms (i.e., AWS, Azure, or GCP).

• 5 years of experience with source code management (SCM) platforms, including GitLab.

• 5 years of experience with one or more programming or scripting languages.

• 5 years of application DevSecOps experience with hands-on development experience in an Agile environment.

• 3 years of experience building and deploying Docker containers and utilizing platforms such as Kubernetes.

• 5 years of experience implementing infrastructure as code and orchestration.

• 5 years of experience building CI/CD pipelines with tools such as Jenkins, GitLab CI/CD, GitHub Actions, CircleCI, or Travis CI.

• 5 years of experience integrating deployments with industry-standard DevSecOps tooling and orchestration.

• Experience integrating test automation, including performance, security, and functional tests, into CI/CD pipelines.

• Experience with Static Application Security Testing (SAST) and integrating security scanning into development and CI/CD processes.

• Experience with Wiz, Palo Alto Cortex, or similar cloud security tools.

• Experience providing technical leadership and mentorship to engineering teams.

• Demonstrated ability to work independently, take initiative, and drive technical efforts with minimal oversight.

• Experience fostering collaboration and communication across technical teams and client stakeholders.

• Excellent written and verbal communication, interpersonal, and collaborative skills.

Preferred:

• Certifications:

  • AWS Certified DevOps Engineer

  • AWS Certified Solutions Architect – Professional

  • Microsoft Certified: DevOps Engineer Expert

  • SAFe DevOps Certification

• Experience implementing automated testing frameworks, including Selenium.

• Experience documenting an as-is state of the environment, performing gap analyses, and producing artifacts that articulate options and recommendations.

• Experience with scripting in Concourse, Bash, PowerShell, Python, Groovy, or Ruby.

• Experience with automation tools, including Chef, Terraform, CloudFormation, or Ansible.

About steampunk

Steampunk relies on several factors to determine salary, including but not limited to geographic location, contractual requirements, education, knowledge, skills, competencies, and experience. The projected compensation range for this position is $150,000 to $185,000. The estimate displayed represents a typical annual salary range for this position. Annual salary is just one aspect of Steampunk’s total compensation package for employees. Learn more about additional Steampunk benefits here.

Identity Statement

As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

Steampunk is aChange Agentin the Federal contracting industry, bringing new thinking to clients in the Homeland, Federal Civilian, Health and DoD sectors. Through ourHuman-Centered delivery methodology, we are fundamentally changing the expectations our Federal clients have for true shared accountability in solving their toughest mission challenges.If you want to learn more about our story, visithttp://www.steampunk.com.

We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law.Steampunk participates in the E-Verify program.