SENIOR DEVSECOPS ENGINEER - CLOUD (NAUT):
Bowhead seeks a Senior DevSecOps Engineer - Cloud to support our customer on the Nautical contract in the Arlington, VA area. This position leads the implementation of secure DevSecOps practices for migrating legacy DoD applications to cloud environments.
Responsibilities Design and implement CI/CD pipelines incorporating security controls for cloud environments (AWS GovCloud, Azure Government, Google Cloud for Government)Develop and maintain Infrastructure as Code (IaC) using tools such as Terraform, CloudFormation, and AnsibleImplement automated security scanning and vulnerability assessment tools within deployment pipelinesEstablish container security practices for Docker and Kubernetes environmentsEnsure compliance with DoD security frameworks including NIST 800-53, FISMA, and FedRAMPCollaborate with development teams to implement security best practices throughout the software development lifecycleMonitor and respond to security incidents in cloud environmentsMaintain documentation for security procedures and compliance requirementsProvide technical guidance on secure cloud architecture patternsLead security assessments and Authority to Operate (ATO) processesInterface with the customer and external stakeholders in working groups, technical exchange meetings, and other forumsChair/co-chair meetings and working groups on behalf of government representatives as directedResolve problems, allocate resources, manage personnel, and monitor performance to meet contract requirementsProvide daily control and supervision of employees as assignedProvide planned replacement information at least 15 calendar days prior to replacementProvide information within 24 hours of an unplanned replacementOther duties as assigned Qualifications Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Data Science, Information Systems, or related field from an ABET accredited or CAE designated institution, OR 10+ years of relevant experience in lieu of degreeMinimum of 10+ years of experience in DevOps/DevSecOps engineeringMinimum of 5+ years of experience with cloud platforms (AWS, Azure, GCP)Experience with DoD security frameworks and compliance requirementsProficiency in scripting languages (Python, Bash, PowerShell)Experience with containerization technologies (Docker, Kubernetes)Knowledge of security tools (Nessus, Qualys, Fortify, SonarQube)Experience with CI/CD tools (Jenkins, GitLab CI, Azure DevOps)Strong understanding of network security and encryption protocolsExperience managing technical personnel for IT and/or cybersecurity effortsPreferred Qualifications:Master's degree in relevant fieldCloud certifications (AWS Solutions Architect, Azure Solutions Architect, GCP Professional Cloud Architect)Experience with legacy DoD systems migrationKnowledge of microservices architecture patternsExperience with service mesh technologies (Istio, Linkerd)DAWIA PM Practitioner certificationCERTIFICATION REQUIREMENTS:Required: DoD 8570 IAT Level II or III certification
Desired: GIAC Security Essentials (GSEC), FITSP-D, GIAC Cloud Security Automation (GCSA), GIAC Information Security Fundamentals (GISF), (ISC)2 Systems Security Certified Practitioner (SSCP), CompTIA Security+
Physical Demands:
Must be able to lift 25 pounds on occasion.Must be able to stand and walk for prolonged period amounts of time.Must be able to twist, bend, and squat periodically.
SECURITY CLEARANCE REQUIREMENTS: Must be able to maintain a security clearance at the Top Secret level with SCI eligibility and maintain SAP eligibility. Due to work requirements, this position will not entertain work from home capabilities. US Citizenship is a requirement for this contract.
#LI-KC1
Options Apply for this job onlineApplyShareEmail this job to a friendRefer Sorry the Share function is not working properly at this moment. Please refresh the page and try again later. Share on your newsfeedApplicants may be subject to a pre-employment drug & alcohol screening and/or random drug screen, and must follow UIC’s Non-DOT Drug & Alcohol Testing Program requirements. If the position requires, an applicant must pass a pre-employment criminal background history check. All post-secondary education listed on the applicant’s resume/application may be subject to verification.
Where driving may be required or where a rental car must be obtained for business travel purposes, applicants must have a valid driver license for this position and will be subject to verification. In addition, the applicant must pass an in-house, online, driving course to be authorized to drive for company purposes.
UIC is an equal opportunity employer. We evaluate qualified applicants without regard to race, age, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other protected characteristics EOE/D/V. In furtherance, pursuant to The Alaska Native Claims Settlement Act 43 U.S.C. Sec. 1601 et seq., and federal contractual requirements, UIC and its subsidiaries may legally grant certain preference in employment opportunities to UIC Shareholders and their Descendants, based on the provisions contained within The Alaska Native Claims Settlement Act. Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities.
All candidates must apply online at www.uicalaska.com, and submit a completed application for all positions they wish to be considered. Once the employment application has been completed and submitted, any changes to the application after submission may not be reviewed. Please contact a UIC HR Recruiter if you have made a significant change to your application. In accordance with the Americans with Disabilities Act of 1990 (ADA), persons unable to complete an online application should contact UIC Human Resources for assistance (https://uicalaska.com/careers/recruitment/).
The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information. 41 CFR 60-1.35(c)
UIC Government Services (UICGS / Bowhead) provides innovative business solutions to federal and commercial customers in the areas of engineering, maintenance services, information technology, program support, logistics/base support, and procurement. Collectively, the fast-growing Bowhead Family of Companies offers a breadth of services which are performed with a focus on quality results. Headquartered in Springfield, VA, we are a fast-growing, multi-million-dollar company recognized as a top Alaska Native Corporation providing services across the Department of Defense and many federal agencies. Bowhead offers competitive benefits including medical, dental, vision, life insurance, accidental death and dismemberment, short/long-term disability, and 401(k) retirement plans as well as a paid time off programs for eligible full-time employees. Eligible part-time employees are able to participate in the 401(k) retirement plans and state or contract required paid time off programs. Join our Talent Community!
Join our Talent Community to receive updates on new opportunities and future events.
Application FAQsSoftware Powered by iCIMS
www.icims.com