DevSecOps Engineer

About the role

The client is seeking a DevSecOps Software Engineer to modernize a large-scale legacy codebase by designing advanced GitLab CI/CD pipelines and driving the transition from monolithic to modular builds within a cross-functional engineering team.

Responsibilities

• Evaluate a large, complex legacy codebase and assess the current CI/CD pipeline to create a strategic modernization roadmap enabling modular builds.
• Collaborate with stakeholders to validate and ensure end-to-end quality and effectiveness of all proposed build enhancements.
• Identify technical obstacles stemming from technical debt or system requirements and develop pragmatic solutions to resolve them.
• Build expertise with the client's catalog of shared CI/CD capabilities and integrate applicable tools into proposed modular build enhancements.
• Design and implement GitLab CI/CD pipelines with advanced job separation, artifact flow, and dependency management across a large codebase.
• Apply software architecture principles, including micro-service patterns, API contracts, and service boundaries, to support legacy system decomposition.
• Contribute backend and build automation expertise using C/C , Java, Make, Gradle, and Bash scripting to troubleshoot compilation failures and pipeline issues.

Requirements

• Proven experience with GitLab for source-code management and orchestrating complex software builds, including advanced pipeline architecture and artifact flow between jobs.
• Hands-on software engineering experience with large-scale codebases in C, C , and/or Java.
• Strong familiarity with build automation tools and scripting languages, including Make, Gradle, and Bash.
• Bachelor's degree in Computer Science, Software Engineering, Computer Engineering, or a comparable STEM discipline.
• Must be able to obtain or actively hold an active Secret security clearance.

Preferred Qualifications

• Demonstrated leadership in architecting and modernizing large, complex legacy software systems with hands-on C/C or Java expertise.
• Experience with DevOps and automation practices, including Infrastructure-as-Code (IaC), automated testing, and release pipeline construction.
• Proven track record designing and delivering micro-services solutions, including API design using REST, gRPC, GraphQL, and OpenAPI.
• Familiarity with SAST tools such as Fortify or comparable solutions, and binary management repositories such as Artifactory or Nexus.
• Experience with containerization and orchestration technologies including Docker, Docker Compose, Kubernetes, and Ansible.
• Strong foundation in software design fundamentals such as design patterns, architectural styles, and SOLID principles.
• Prior experience migrating from legacy source control and build systems (e.g., Gerrit/Jenkins) to GitLab.