DevSecOps Engineer Security Clearance

Position: DevSecOps Engineer with Security Clearance
Strait Sys Inc Regular Primary Function:
Strait Sys is looking for a Dev Sec Ops  Engineer with AWS experience to support the Federal Bureau of Investigation (FBI). The Dev Sec Ops  Engineer will meet the needs of our software development lifecycle. This role will use technical skills for the design and implementation of various CI/CD patterns while abiding by industry standards and policies. Often taking part in design and code reviews and offering direction to ensure project scoping activities match architectural goals and specifications.

When new applications are introduced or current ones undergo changes, the Dev Sec Ops  Engineer will frequently work with partners in other divisions to provide build solutions. Other responsibilities include documenting Dev Sec Ops  processes and ensuring that the Dev Sec Ops  platforms are up to date and properly maintained. The Dev Sec Ops  Engineer will have a significant impact on the team as a member in charge of the enterprise's engineering and maintenance.

Essential Duties:
* Create, develop, and implement solutions to address infrastructure and security requirements.

* Identify the needs for build automation, designing, and implementing CI/CD solutions.

* Consult on Dev Sec Ops  requirements from diverse application/line of business partners.

* Create plug-and-play/reusable solutions and patterns for CI/CD pipelines.

* Create, develop, and implement automation and system integration for various build platforms.

* Publish and disseminate CI/CD best practices, patterns, and solutions.

* Ensure that the service's uptime and response time SLAs/OLAs are met or surpassed.

* Build or maintain CI/CD building blocks and shared libraries proactively for app and development teams to enable quicker build and deployment.

* Design action plans to address CICD platform/tools/solutions' shortcomings and difficulties.

* Actively participate with team members and contractors/vendors to prevent or quickly address problems.

* Troubleshoot, identify, and fix problems in the Dev Sec Ops  domain.

* Ensure incident tracking tools are updated in accordance with established norms and processes, gather all essential data and document any discoveries and concerns.

* Identify management concerns and problems, assess them, and offer prompt solutions and/or escalation.

* Align with technological Systems/Software Development Life Cycle (SDLC) processes and industry-standard service management principles (such as ITIL).

* Create and publish engineering platforms and solutions.

Supervisory Responsibilities:

* None Desired Knowledge, Skills & Abilities:
* Comprehensive technical expertise in a variety of Dev Sec Ops  toolkits, including Ansible, Jenkins, Artifactory, Jira, Black Duck, Terraform, Git/Version Control Software, or comparable technologies.

* Familiarity with information security frameworks and standards.

* Knowledge of Dev Ops Automation (Terra From, Git Lab, Git Hub, Git Hub Actions).

* Knowledge of Prisma cloud, SIEM, SOC, Nesus, Crowd strike or similar services.

* Familiarity with API Security, Container Security, AWS Cloud Security.

* Familiarity with Amazon AWS policy, configuration, and security management tools.

* Proven capacity for thinking leadership and a highly creative problem-solver.

* Excellent analytical and interpersonal skills.

* Ability to express technical information clearly at different organizational levels.

* Knowledge of PCI-DSS, HIPPA, SOX, GDPR, and CCPA Standards and Policies and the associated certification and audit processes.

* CISM, CISSP or other Security Certifications.

* Auditing and Compliance Certifications such as CISA, PCI-ISA, and PCIP.

* Experience with infrastructure as code (IaC) tools (Puppet, Ansible, AWS Cloud Formation or equivalent).

* Strong understanding of cloud computing platforms (AWS, Azure) and infrastructure services.

* Demonstrated experience using AWS to include S3, EC2, SNS, SQS, and Lambda.

* Experience with Power Shell or other scripting languages like Bash.

* Experience with aws-cli (and other container images) as it relates to automation within CI/CD pipelines.

* Experience with industry standard Static Code Analysis (SCA) tools such as Sonar Qube, Nexus IQ Server, Fortify, JFrog Artifactory.

* Prefer at least one of the following certifications:
Certificate of Cloud Security Knowledge (CCSK), Amazon Web Service (AWS) Solutions Architect - Associate, Microsoft Certified:
Azure Fundamentals, Google Associate Cloud Engineer, or other certifications exemplifying skill sets needed to manage IT systems in the cloud

Required Qualifications:

* Active Top Secret Clearance.

* Bachelor's or master's degree in engineering, Computer Science, Information Systems, Cloud Computing, or related technical discipline. Education substitution requires 9+ years' proven specialized experience managing IT network or system operations, maintenance, and design for on-premises and/or cloud environments

* 5+ years specialized experience managing IT systems with system architecture…