DevSecOps Engineer

About the role

Entarian is looking for a DevSecOps Engineer to support the Naval Supply Systems Command (NAVSUP) Ordnance Information System (OIS) program based in Mechanicsburg, PA, as they modernize their legacy IT systems. The right candidate will work directly with the program’s Lead Pipeline / DevSecOps Engineer and the DevSecOps Engineering team, software developers, production/operations, and integration teams to support a complex program delivering Agile development and operations and maintenance on a mission-critical system. This DevSecOps engineer will implement the pipeline execution plan to maximize performance and quality with the right automations and efficiencies for IT modernization efforts. The position is on-site in a secured space five days per week and can be filled in either Mechanicsburg, PA, or Yorktown, VA.

Responsibilities

• Implement the CI/CD and DevSecOps execution plan to maximize performance and quality.
• Monitor associated standards for build and deployment processes, data pipelines between software development tools through deployment to Kubernetes pods, etc.
• Monitor CI/CD and DevSecOps capabilities/processes to ensure alignment with Navy policies and implement security architecture including automation where best suited; ensure processes account for data separation, environment separation (dev, test, prod), and separation of user and privilege user roles.
• Apply CI/CD to define and operate configuration management processes for Non-Production and Production environments.
• Build CI/CD-based version control, automated builds, and release management aligned with Navy requirements.
• Document the program’s enterprise CI/CD and DevSecOps strategy, high-level data flow, implement and monitor end-to-end data management/technical architecture, integrate with tools such as Jira, Jenkins, Selenium, Ansible, GitLab, Docker, etc., and provide corresponding roadmaps.
• Draft and edit existing documentation and coordinate documents with subject matter experts within the contract program and software development teams.
• Work with the Lead Pipeline / DevSecOps Engineer to facilitate solutions integrating automated code analysis validation processes where possible.
• Monitor CI/CD and DevSecOps implementation across a matrixed team, tracking and managing solutions, status updates, schedules, and risks.
• Collaborate daily with extended teams and communicate with team leadership and potentially senior leadership regarding matters of significant importance.

Minimum Qualifications

• Must have a fully adjudicated DOD T5 background check (Top Secret Clearance) to start; U.S. citizenship required for Federal clearance.
• Certification Requirement: Directive 8570.1/8140 – IAT II: Security+ baseline cert (required to start); Security+ (or CCNA-Security, SSCP, CySA+, or GICSP).
• Computing Environment Cert (must obtain within 3 months if not already held): AWS Certified Cloud Practitioner or similar equivalent Cloud environment certification (Cloud Architect, DevOps or SysOps Associate or Professional Certification).
• AA/AS in Engineering, Computer Science or related field or equivalent experience and at least 1 year of prior relevant DevSecOps experience.
• Experience with CI/CD pipeline automation tools, cloud environments and associated cloud deployments and network stack/protocols.
• Knowledgeable in building and working with Docker or similar containers.
• Ability to work in an Agile environment and collaborate with other teams/groups in a fast-paced Agile environment.
• Experience programming and designing software using Terraform and AWS cloud services.
• Experience with modern development software, tools, and methodologies such as GitLab and Docker.
• Strong verbal and written technical communication skills.

Desired Qualifications

• Experience programming and designing software using Ansible, Java, J2EE, Oracle, WebLogic, Tomcat.
• Experience with Jenkins, Jira, Nexus, Maven, OpenShift, SonarQube, Fortify, Junit, Karma, Selenium, Cypress, Artifactory.
• Experience in network and cybersecurity design, engineering, and operations with emphasis on Navy capabilities.
• Experience developing models using Sparx EA, Splunk, MuleSoft, Salesforce.
• Experience with NIST SP 800 series or ISO 27000 series documents for information security management and risk assessment.
• Experience with Angular, ReactJS, Spring MVC, jQuery, JSF, JSP, MyBatis, Hibernate, IBM MQ, Kafka, ELK, Grafana, or PL/SQL.
• Experience with server virtualization technologies such as VMware, Citrix, or Hyper-V.
• Experience with operating systems such as Red Hat Linux and Windows Server.
• Kubernetes troubleshooting experience (pod failures, networking, deployments, etc.).
• Experience with ITIL, ISO 20000 / ISO 27001 implementations.
• Experience with Navy IT projects.