Sr. IT DevSecOps Engineer

Custom Software Systems, Inc. (CSS) is seeking an experienced Sr. IT DevSecOps Engineer. The candidate will help build GitLab-based DevSecOps automated pipelines into AWS gov cloud; support and enable application delivery times on CI/CD platform; manage and operate GitLab CI/CD.  

Responsibilities 

• Build GitLab-based DevSecOps automated pipelines into AWS gov cloud.  

• Support and enable application delivery times on CI/CD platform.  

• Manage and operate GitLab CI/CD.
  

Clearance 

• Must be clearable. 

Citizenship 

US Citizenship  

Knowledge, Skills & Abilities 

Version Control Systems  

• Proficiency with Git  

• Advanced knowledge of GitLab, including CI/CD pipelines, merge requests, and issue tracking  

• Familiarity with branching, promotion, and release strategies (such as SemRel)  

• Familiarity using internalized registries and repositories (Nexus dependency management, internal container registries, etc.)  

CI/CD  

• GitLab CI/CD 

• GitLab runners (configuration and management)  

• GitLab components (Or generally developing and utilizing templates for CI/CD jobs in any platform, such as GitHub Actions) 

Cloud Platforms  

• Demonstrated proficiency with AWS (Lambda, EC2, S3, EBS/EFS, ECS, EKS, SNS, CloudWatch)  

• Containerization  

• Docker (building, deploying, and managing containers)  

• Kubernetes (orchestration, deployment strategies, security, troubleshooting)  

• Container security best practices  

• Including container hardening strategies, such as maintaining a secure “golden” image  

• Deploying and managing container-based runners hosted on EKS  

• GitOps tools and deployment principles (such as ArgoCD/Flux)  

Security Testing  

• Static Application Security Testing (SAST)  

• Dynamic Application Security Testing (DAST)  

• Interactive Application Security Testing (IAST)  

• Software Composition Analysis (SCA)  

• Container scanning tooling (Trivy, Prisma/Twistlock, Neuvector, etc.)  

• Infrastructure as Code (IaC)  

• Terraform (writing, managing, and optimizing Terraform configurations)  

• Other IaC tools (e.g., CloudFormation, Ansible)  

Scripting and Programming  

• Proficiency in scripting languages (e.g., Python, Bash)  

• Basic to intermediate programming skills