Senior DevSecOps Engineer - Cloud

Overview

SENIOR DEVSECOPS ENGINEER - CLOUD (NAUT):

Bowhead seeks a Senior Dev Sec Ops  Engineer - Cloud to support our customer on the Nautical contract in the Arlington, VA area. This position leads the implementation of secure Dev Sec Ops  practices for migrating legacy DoD applications to cloud environments.

• Design and implement CI/CD pipelines incorporating security controls for cloud environments (AWS Gov Cloud, Azure Government, Google Cloud for Government)
• Develop and maintain Infrastructure as Code (IaC) using tools such as Terraform, Cloud Formation, and Ansible
• Implement automated security scanning and vulnerability assessment tools within deployment pipelines
• Establish container security practices for Docker and Kubernetes environments
• Ensure compliance with DoD security frameworks including NIST 800-53, FISMA, and FedRAMP
• Collaborate with development teams to implement security best practices throughout the software development lifecycle
• Monitor and respond to security incidents in cloud environments
• Maintain documentation for security procedures and compliance requirements
• Provide technical guidance on secure cloud architecture patterns
• Lead security assessments and Authority to Operate (ATO) processes
• Interface with the customer and external stakeholders in working groups, technical exchange meetings, and other forums
• Chair/co-chair meetings and working groups on behalf of government representatives as directed
• Resolve problems, allocate resources, manage personnel, and monitor performance to meet contract requirements
• Provide daily control and supervision of employees as assigned
• Provide planned replacement information at least 15 calendar days prior to replacement
• Provide information within 24 hours of an unplanned replacement
• Other duties as assigned

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Data Science, Information Systems, or related field from an ABET accredited or CAE designated institution, OR 10+ years of relevant experience in lieu of degree
• Minimum of 10+ years of experience in Dev Ops/Dev Sec Ops  engineering
• Minimum of 5+ years of experience with cloud platforms (AWS, Azure, GCP)
• Experience with DoD security frameworks and compliance requirements
• Proficiency in scripting languages (Python, Bash, Power Shell)
• Experience with containerization technologies (Docker, Kubernetes)
• Knowledge of security tools (Nessus, Qualys, Fortify, Sonar Qube)
• Experience with CI/CD tools (Jenkins, Git Lab CI, Azure Dev Ops)
• Strong understanding of network security and encryption protocols
• Experience managing technical personnel for IT and/or cybersecurity efforts

• Master's degree in relevant field
• Cloud certifications (AWS Solutions Architect, Azure Solutions Architect, GCP Professional Cloud Architect)
• Experience with legacy DoD systems migration
• Knowledge of microservices architecture patterns
• Experience with service mesh technologies (Istio, Linkerd)
• DAWIA PM Practitioner certification

Required:

DoD 8570 IAT Level II or III certification

Desired: GIAC Security Essentials (GSEC), FITSP-D, GIAC Cloud Security Automation (GCSA), GIAC Information Security Fundamentals (GISF), (ISC)2 Systems Security Certified Practitioner (SSCP), CompTIA Security

• Must be able to lift 25 pounds on occasion.
• Must be able to stand and walk for prolonged period amounts of time.
• Must be able to twist, bend, and squat periodically.

Security Clearance Requirements:
Must be able to maintain a security clearance at the Top Secret level with SCI eligibility and maintain SAP eligibility. Due to work requirements, this position will not entertain work from home capabilities. US Citizenship is a requirement for this contract.

UIC is an equal opportunity employer. We evaluate qualified applicants without regard to race, age, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other protected characteristics EOE/D/V. In furtherance, pursuant to The Alaska Native Claims Settlement Act 43 U.S.C. Sec. 1601 et seq., and federal contractual requirements, UIC and its subsidiaries may legally grant certain preference in employment opportunities to UIC Shareholders and their Descendants, based on the provisions contained within The Alaska Native Claims Settlement Act.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities.

All candidates must apply online at , and submit a completed application for all positions they wish to be considered. Once the employment application has been completed and submitted, any changes to the application after submission may not be reviewed. Please contact a UIC HR Recruiter if you have made a significant change to your application. In accordance with the Americans with Disabilities Act of 1990 (ADA), persons unable to complete an online application should contact UIC Human Resources for assistance ().

The contractor will not discharge or in any…