Title: Sr. IT DevSecOps Engineer
Work Authorization – USC only
Duration: 10 month + contract
Job Description – Sr. IT DevSecOps EngineerPosition SummaryThe Sr. IT DevSecOps Engineer will build GitLab?based DevSecOps automated pipelines into AWS GovCloud, support and accelerate application delivery on the CI/CD platform, and manage and operate GitLab CI/CD
environments.Certifications·GitLab certification desired but not required·AWS certification desired but not requiredKnowledge, Skills, and Experience·Version Control Systems·Proficiency with Git·Advanced knowledge of GitLab, including CI/CD pipelines, merge requests, and issue tracking·Familiarity with branching, promotion, and release strategies (such as SemRel)·Familiarity using internalized registries and repositories (Nexus dependency management, internal container registries, etc.)CI/CD·GitLab CI/CD·GitLab runners (configuration and management)·GitLab components (or generally developing and utilizing templates for CI/CD jobs in any platform, such as GitHub Actions)Cloud Platforms·Demonstrated proficiency with AWS (Lambda, EC2, S3, EBS/EFS, ECS, EKS, SNS,
CloudWatch)Containerization·Docker (building, deploying, and managing containers)·Kubernetes (orchestration, deployment strategies, security, troubleshooting)·Container security best practices·Container hardening strategies, such as maintaining a secure “golden” image·Deploying and managing container-based runners hosted on EKS·GitOps tools and deployment principles (such as
ArgoCD/Flux)Security Testing·Static Application Security Testing (SAST)·Dynamic Application Security Testing (DAST)·Interactive Application Security Testing (IAST)·Software Composition Analysis (SCA)·Container scanning tooling (Trivy, Prisma/Twistlock, Neuvector,
etc.)Infrastructure as Code (IaC)·Terraform (writing, managing, and optimizing Terraform configurations)·Other IaC tools (e.g., CloudFormation, Ansible)Scripting and Programming·Proficiency in scripting languages (e.g., Python, Bash)·Basic to intermediate programming skills·Experience working with a Linux-based shell and navigating Linux systems·Ability to work well in a paired programming environment at timesAutomation·Creating and maintaining automated security checks and remediations·Integrating security into automated deployment processes·Incorporating linting tooling into development processes·Incorporating unit & performance testing into deployment processes