Staff DevSecOps Engineer

This is a U.S. based position. All of the programs we support require U.S. citizenship to be eligible for employment. All work must be conducted within the continental U.S.

Who we are:

Raft (https://TeamRaft.com) is a customer-obsessed non-traditional small business with a purposeful focus on Distributed Data Systems, Platforms at Scale, and Complex Application Development, with headquarters in McLean, VA. Our range of clients includes innovative federal and public agencies leveraging design thinking, cutting-edge tech stack, and cloud-native ecosystem. We build digital solutions that impact the lives of millions of Americans.

We’re looking for an experienced Staff DevSecOps Engineer to support our customers and join our passionate team of high-impact problem solvers.

About the role:

As a Staff DevSecOps Engineer, your day begins with architecting, developing, and implementing end-to-end cluster and application lifecycles, ensuring secure and efficient processes. You will then collaborate with clients, designing and executing bespoke Kubernetes or Docker solutions tailored to their unique requirements, be they cloud-based or on-premises. A significant portion of your day is dedicated to constructing and perfecting CI/CD pipelines, which aids in the rapid and reliable delivery of software updates. This includes ensuring applications that get built are using hardened base containers via CI/CD pipelines. Suggest and, in cooperation with the pipeline Engineers, implement container hardening pipelines that produce hardened base containers, as well as harden existing application containers. Finally, you will oversee the application of GitOps principles for software delivery, reinforcing the use of version control and enabling a more streamlined and dependable deployment process.

What we are looking for:

• 5-8 years of hands-on experience with Kubernetes or Docker, provisioning production clusters and maintaining their compliance
• 3+ years of experience implementing automated validations of RMF controls (e.g., NIST 800-53) in container or VM images
• 3+ years of experience developing, troubleshooting, maintaining build automation for applications and images and developing end-to-end application testing
• Experience with securing and hardening Linux virtual machines and containers
• Experience with cosign for signing and verifying container images and attestations
• Experience building Gitlab CICD pipeline templates and jobs
• Proven experience in software systems development via CI/CD pipelines (Gitlab Pipelines) 
• Architect, develop and implement end-to-end cluster and application lifecycles
• Work with clients architecting, developing, and implementing Kubernetes or Experience with AWS and cloud technologies
• Knowledgeable in Agile, DevOps and DevSecOps methodologies, practices, and culture 
• Experience with managing and integrating Service-Mesh, such as Istio
• Strong knowledge of version control systems like Gitlab, ability to maintain/operate Gitlab in the Cloud or on-premises
• Problem solving aptitude
• Experience with designing and implementing enterprise-grade, scalable cloud-based services to support our development teams
• Implement GitOps for Software Delivery, i.e., FluxCD, ArgoCD
• Experience with Log Management and Analytics tools such as PLG/Splunk/ELK 
• Experience with building, deployment, release automation, or orchestration
• Experience writing Unit/Integration/e2e testing (e.g., Junit, Cypress, Selenium)
• Experience with Infrastructure as Code (e.g., Terraform, Ansible, etc.) 
• Experience building and consuming micro-services - RESTful APIs, SOAP APIs, Web Services 
• Obtain Security+, IASAE II, and CKA required within the first 30 days of employment with Raft

Highly preferred:

• Experience with implementing Sigstore and Cosign to sign container images as well as SBOMs
• Experience with hardening application containers
• Proven experience with Istio service mesh
• Experience with programming languages such as Python, Go, Java, JavaScript, TypeScript, C#
• Passionate about automation, system efficiency, and sec