DevSecOps Engineer

Dark Wolf is seeking a DevSecOps Engineer to join our team and play a crucial role in securing our software development lifecycle (SDLC) using automation to support web application deployments. The candidate will be responsible for understanding and securing automated CI/CD pipelines, infrastructure as code (IaC), and advising other teams on security best practices across the entire pipeline development process.

Responsibilities

• Implement, secure, and improve applications using GitLab CI/CD, focusing on reviewing pipeline security scans and hardening of web applications.
• Support Certificate to Field granting to the customer's platform using knowledge of secure development practices.
• Work with Platform One BigBang services and technologies.
• Operate within Agile frameworks such as Scrum and Kanban, utilizing Atlassian Jira and Confluence for project management and documentation.
• Deploy and manage containerized applications using Docker, Kubernetes, and ArgoCD on Red Hat Enterprise Linux environments.
• Use Infrastructure as Code (IaC) tools like Ansible and Terraform.
• Manage storage and artifact repositories using MinIO, Nexus, and S3 solutions.
• Monitor system performance with tools like Grafana, Kibana, and Prometheus.
• Integrate and manage security scanning tools such as Anchore, NeuVector, SonarQube, and Twistlock (Prisma Cloud) into the CI/CD pipeline to identify and mitigate vulnerabilities.
• Secure sensitive data using HashiCorp Vault and SOPS Encryption for secrets management.
• Understand PostgreSQL and other database technologies.
• Work with multiple programming languages including JavaScript, Bash, C++, Go, PHP, Python, Rust, and TypeScript.
• Support web application deployments using frameworks and libraries such as .Net, FastAPI, Flask, Flutter, Rails, React, Shiny, and Vue.
• Utilize build tools like Gradle and Maven, and package managers such as Npm, Yarn, and Yum to manage dependencies and automate builds.

Required Qualifications

• 12+ years of proven experience in DevSecOps, with a strong background in Linux and container technologies.
• Expertise in implementing and managing CI/CD pipelines, particularly GitLab CI/CD.
• High‑level experience with containerization technologies (Docker, Kubernetes).
• Proficiency with IaC tools (Ansible, Terraform).
• Knowledge of storage and artifact repositories (MinIO, Nexus, S3).
• Familiarity with monitoring tools (Grafana, Kibana, Prometheus).
• Experience with security scanning tools (Anchore, NeuVector, SonarQube, Twistlock/Prisma Cloud).
• Ability to apply security remediations to systems and software.
• Experience with secrets management tools (HashiCorp Vault, SOPS).
• U.S. citizenship and an active Secret security clearance.

Desired Qualifications

• Familiarity with programming languages such as Python, Go, Bash, and others.
• Experience with frameworks/libraries like .Net, React, Rails.
• Knowledge of build tools (Gradle, Maven) and package managers (Npm, Yarn, Yum).
• Experience with databases, specifically PostgreSQL.

Location

San Antonio, TX

Pay

Estimated salary range: $155,000.00 – $185,000.00, commensurate with experience and technical skillset.