DevSecOps Engineer - Broomfield, United States - LHH

    LHH
    LHH Broomfield, United States

    1 month ago

    LHH background
    Description

    LHH is seeking candidate for our client in Broomfield, CO. We are Seeking DevSecOps candidates with 8 or more years of experience for a long term contract position. There is potential for this role to also turn into a permanent role for the right candidate. This role is Hybrid and will be on site 3 days a week.

    Submit your CV and any additional required information after you have read this description by clicking on the application button.

    Non-negotiable Requirements:

    • BS degree or higher in Engineering or a related technical field is required
    • 6 or more years of related experience
    • A current, active or ability to obtain a TS/SCI CI Polygraph clearance is required.
    • DoD 8570 compliance is required.

    Responsibilities:

    • Collaborate with cross-functional teams to design, implement, and maintain secure and scalable DevSecOps pipelines.
    • Develop and automate deployment, monitoring, and maintenance processes using Infrastructure as Code (IAC) and cloud-based technologies such as AWS, Terraform, and Kubernetes.
    • Implement security best practices and controls throughout the software development lifecycle (SDLC) to ensure compliance with industry standards and regulatory requirements.
    • Conduct vulnerability assessments, penetration testing, and security audits to identify and mitigate security risks.
    • Monitor and analyze system performance, security events, and logs to proactively identify and address security incidents and vulnerabilities.
    • Work closely with software developers, system administrators, and security analysts to integrate security controls and tools into the CI/CD pipeline.
    • Provide guidance and support to internal teams on security best practices, tools, and technologies.

    Nice-to-Have Skills:

    • Experience with Linux servers, scripting, and support (Ansible).
    • Experience with specialized network environments (air-gapped, limited access).
    • Experience with VMWare technologies (vSphere ESXI, vCenter, vRealize Operations Manager, Tanzu, NSX).
    • Experience with AWS services (KMS, VPC, LBs, IAM Roles, Firewall, Security Groups, S3, EC2, SQS, SNS, ElastiCache, Workspaces, RDS).
    • Experience with DevSecOps tools (Jenkins, Artifactory, Kubernetes, Gitlab, Fortify).