Sr. DevSecOps Engineer

Sr. DevSecOps Engineer

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: None

Employee Type: Regular

Percentage of Travel Required: None

Type of Travel: None

* * *

The Opportunity:
The Global Combat Support System-Marine Corps program is seeking an Oracle Application Database Administrator to be
part of a team that improves Marine Corps combat effectiveness by continuing to provide cutting-edge business
information. GCSS-MC utilizes Oracle R12 E-Business Suite (EBS) Supply Chain Management (SCM) and Oracle 19c
Commercial-Off-The-Shelf (COTS) applications to provide functions that include asset visibility, supply, maintenance,
readiness, task organization, repairs, request tracking, and financial information.

Responsibilities:

• Implement and maintain secure CI/CD pipelines, integrating security measures throughout the software development lifecycle.
• Develop, implement, and enforce security policies and best practices across development and operations teams.
• Conduct regular security assessments, vulnerability scans, and penetration testing to identify and address potential security risks.
• Automate security processes and integrate security tools into existing DevOps workflows to ensure consistent and efficient security practices.
• Collaborate with development, operations, and security teams to foster a culture of security awareness and implement secure coding practices.

Qualifications:

Required: 

• Bachelor's degree in Computer Science, Software Engineering, or a related field.
• 10+ years of experience in DevOps, security engineering, or a similar role
• Proven track record of implementing and maintaining secure CI/CD pipelines
• Experience with cloud platforms (AWS, Azure, GCP)
• Familiarity with APIs and web services
• Proficiency in scripting languages (e.g., Python, Bash, PowerShell)
• Experience with infrastructure as code tools (e.g., Terraform, CloudFormation)
• Knowledge of containerization and orchestration (Docker, Kubernetes)
• Familiarity with security tools and practices (e.g., SAST, DAST, IAST, SCA)
• Understanding of network security and firewall configurations
• In-depth understanding of cybersecurity principles and best practices
• Experience with compliance standards (e.g., ISO 27001, HIPAA, PCI-DSS)
• Knowledge of threat modeling and risk assessment methodologies.
• Must be a US citizen

Desired:

• Familiarity with version control systems (e.g., Git)
• Strong communication and collaboration abilities
• Problem-solving and analytical thinking skills
• Ability to work in a fast-paced, dynamic environment
• Leadership experience and mentoring capabilities
• Experience with SIEM tools and log analysis
• Knowledge of identity and access management (IAM) systems
• Familiarity with serverless architectures and their security implications
• Experience with machine learning and AI in security contexts

-

________________________________________________________________________________________

What You Can Expect:

 

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

 

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

 

A focus on continuous growth.

Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

 

Your potential is limitless. So is ours.

Learn more about CACI here.

________________________________________________________________________________________