Page Mechanical Group, Inc.
Cybersecurity DevSecOps Engineer
Page Mechanical Group, Inc., Washington, District of Columbia, us, 20022
This opportunity is Remote.
About Our Company:
Join Delmock Technologies, Inc. (DTI), a leading HUBZone business in Baltimore, known for delivering sophisticated IT and Health solutions with a commitment to ethics, expertise, and superior service. Actively engaged in the local community, DTI creates opportunities for talented residents while maintaining a stellar reputation as an award-winning contractor, earning accolades like the Government Choice Award for IRS Systems Modernizations. Recently ranked as high as #3 among HUBZone Companies in a GOVWIN survey, DTI offers a dynamic environment for those passionate about impactful projects, community involvement, and contributing to a top-ranking Federal project support team.
At DTI, we balance continuous growth and innovation with a strong dedication to corporate social responsibility. Join our talented team and be part of a company that values both professional excellence and community impact. Explore the exciting career opportunities awaiting you at DTI!
DTI is committed to hiring and maintaining a diverse workforce. We are an equal opportunity employer making decisions without regard to race, color, religion, sex, national origin, age, veteran status, disability, or any other protected class.
Responsibilities:
Drive the unification and automation of processes to enable development of software capability across the entire DOL organization, instrumental in combining code, application maintenance, and application management;
Define, implement, and maintain secure pipelines, promoting a culture of rapid and safe iteration;
Design and refine scalable and reliable CI/CD processes with a security-first approach;
Develop and enhance a robust build pipeline, automating secure build/artifact delivery and deployment;
Use your expertise to identify and mitigate security risks, always prioritizing reasoning and facts;
Collaborate with the existing team to integrate and improve upon current infrastructure with security best practices;
Conduct threat modeling and risk assessments, ensuring that potential vulnerabilities are identified and addressed collaboratively;
Lead and participate in security training and awareness initiatives for the development team;
Develop and maintain an incident response plan, ensuring preparedness in the event of a security breach;
Collaborate with other developers to address security concerns at the root and craft lasting solutions.
Work actively with application development teams, DOL security/ISO, Infrastructure and other teams to coordinate and optimize the steps that execute within the DevOps ecosystem and bring consistency and security best practices in approach, tools, and standards.
Education, Degrees, and Certifications:
Bachelor's degree
Minimum Requirements:
10 years of IT development experience
5 years of experience in DevSecOps practice & tools
Experience building DevSecOps services in IaaS/PaaS/SaaS in Cloud (AWS, Azure) environments and good understanding of their security considerations.
Familiarity with containerization and orchestration tools like Docker and Kubernetes; Experience with Kubernetes, Docker, and/or other cloud orchestration technologies.
Experience with CI/CD best practices, automated builds and tests, quality gates, software quality, and CI tools, i.e., Jenkins, Ansible, Terraform, etc.
Experience with configuration management tools, i.e., Git, GitHub, GitLab, Bitbucket, others.
Familiarity with branching strategies, gated commits, source-controlled management, etc.
Familiarity with the principle of DevSecOps; Atlassian JIRA or other defect tracking tool experience; Atlassian Confluence, GitLab/GitHub, Jenkins, and artifact repository experience.
Familiarity with security coding standard best practices, static and dynamic scanning tools, i.e., SonarQube, Fortify, Coverity, PCLint, etc.
Programming and scripting experience in a UNIX environment (Bash, Shell, PowerShell, Perl, Python, Ruby, etc.).
Must have Agile/SAFe, and other related developer certifications and or demonstrate equivalent experience.
#J-18808-Ljbffr
About Our Company:
Join Delmock Technologies, Inc. (DTI), a leading HUBZone business in Baltimore, known for delivering sophisticated IT and Health solutions with a commitment to ethics, expertise, and superior service. Actively engaged in the local community, DTI creates opportunities for talented residents while maintaining a stellar reputation as an award-winning contractor, earning accolades like the Government Choice Award for IRS Systems Modernizations. Recently ranked as high as #3 among HUBZone Companies in a GOVWIN survey, DTI offers a dynamic environment for those passionate about impactful projects, community involvement, and contributing to a top-ranking Federal project support team.
At DTI, we balance continuous growth and innovation with a strong dedication to corporate social responsibility. Join our talented team and be part of a company that values both professional excellence and community impact. Explore the exciting career opportunities awaiting you at DTI!
DTI is committed to hiring and maintaining a diverse workforce. We are an equal opportunity employer making decisions without regard to race, color, religion, sex, national origin, age, veteran status, disability, or any other protected class.
Responsibilities:
Drive the unification and automation of processes to enable development of software capability across the entire DOL organization, instrumental in combining code, application maintenance, and application management;
Define, implement, and maintain secure pipelines, promoting a culture of rapid and safe iteration;
Design and refine scalable and reliable CI/CD processes with a security-first approach;
Develop and enhance a robust build pipeline, automating secure build/artifact delivery and deployment;
Use your expertise to identify and mitigate security risks, always prioritizing reasoning and facts;
Collaborate with the existing team to integrate and improve upon current infrastructure with security best practices;
Conduct threat modeling and risk assessments, ensuring that potential vulnerabilities are identified and addressed collaboratively;
Lead and participate in security training and awareness initiatives for the development team;
Develop and maintain an incident response plan, ensuring preparedness in the event of a security breach;
Collaborate with other developers to address security concerns at the root and craft lasting solutions.
Work actively with application development teams, DOL security/ISO, Infrastructure and other teams to coordinate and optimize the steps that execute within the DevOps ecosystem and bring consistency and security best practices in approach, tools, and standards.
Education, Degrees, and Certifications:
Bachelor's degree
Minimum Requirements:
10 years of IT development experience
5 years of experience in DevSecOps practice & tools
Experience building DevSecOps services in IaaS/PaaS/SaaS in Cloud (AWS, Azure) environments and good understanding of their security considerations.
Familiarity with containerization and orchestration tools like Docker and Kubernetes; Experience with Kubernetes, Docker, and/or other cloud orchestration technologies.
Experience with CI/CD best practices, automated builds and tests, quality gates, software quality, and CI tools, i.e., Jenkins, Ansible, Terraform, etc.
Experience with configuration management tools, i.e., Git, GitHub, GitLab, Bitbucket, others.
Familiarity with branching strategies, gated commits, source-controlled management, etc.
Familiarity with the principle of DevSecOps; Atlassian JIRA or other defect tracking tool experience; Atlassian Confluence, GitLab/GitHub, Jenkins, and artifact repository experience.
Familiarity with security coding standard best practices, static and dynamic scanning tools, i.e., SonarQube, Fortify, Coverity, PCLint, etc.
Programming and scripting experience in a UNIX environment (Bash, Shell, PowerShell, Perl, Python, Ruby, etc.).
Must have Agile/SAFe, and other related developer certifications and or demonstrate equivalent experience.
#J-18808-Ljbffr