DevSecOps Engineer

Easy Dynamics is seeking a DevSecOps Engineer to function as a lead DevSecOps and infrastructure resource for a team building a highly-visible serverless application for a federal client. The project leverages the AWS CDK for infrastructure and GitHub Actions for CI/CD to deploy infrastructure and code to AWS GovCloud (US). This role will require an ability to design and implement secure and reliable infrastructure while driving automation throughout the stack as much as possible.

Responsibilities

• Leverage and promote modern AWS tooling and best practices to build secure infrastructure for government agencies
• Automate testing and deployments to multiple environments using GitHub Actions
• Actively engage in the code review process to ensure the code base meets a high quality standard and remains readable, maintainable, secure, and performant
• Design, build, and secure infrastructure to meet best practices as well as comply with NIST SP 800-53 and DISA STIGs
• Collaborate internally to develop and apply Easy Dynamics guidance and practices for cloud development and operations
• Mentor more junior team members through code reviews, pair programming, and other means of collaborative development
• Support integrations with additional systems, including ServiceNow and third-party APIs
• Assist stakeholders in developing strategies for cloud development and adoption

Qualifications

• 3-5 years of experience working with Amazon Web Services (AWS) GovCloud (US) regions
• 3-5 years of experience using AWS CloudFormation to build infrastructure, preferably including some time leveraging the AWS CDK
• 3-5 years of software development experience, preferably in TypeScript, JavaScript, Java, or Python
• 1-3 years of experience automating build, test, and deployment workflows as part of a CI/CD pipeline, preferably with GitHub Actions or AWS CodePipeline
• An understanding of AWS best practices, including the Well-Architected Framework, and how to integrate those into both infrastructure and software development
• Familiarity with complying (and documenting compliance) with federal cybersecurity and risk management frameworks including NIST SP 800-53 and DISA STIGs
• At least one AWS Associate-level or higher certification, including Solutions Architect, SysOps Administrator, or Developer
• An understanding of how to build and operate networks on AWS, especially leveraging Transit Gateway
• Deep familiarity with AWS IAM policies and best practices, including both identity and resource policies across an array of AWS services
• Experience leveraging software security tooling to perform static analysis (such as with SonarQube/SonarCloud or CodeQL) or dynamic analysis (such as with OSWASP ZAP)
• US Government Secret Clearance (Preferred)

ABOUT EASY DYNAMICS

Easy Dynamics Corporation is a leading 8a and Woman-Owned Small Business (WOSB) technology services provider with a core focus in Cybersecurity, Cloud Computing, and Information Sharing. We are builders, problem solvers, and trusted advisors who bring well-architected solutions and management consulting to our clients to align them with the best practices their missions demand. As industry leaders, we are committed to delivering unparalleled quality and service in all aspects of our organization and providing our customers with outstanding technical excellence and the business acumen to advise them on both tactical and strategic initiatives. Easy Dynamics’ culture is best described as “East Coast address, West Coast attitude.” We offer a flexible, laid-back atmosphere with a strong focus on maintaining a collaborative team environment. Our employees always come first, and we are active in ensuring their personal and professional growth. To learn more about our company culture and our excellent benefits package, please visit our careers page.

Easy Dynamics is an equal opportunity employer. Applicants are considered for positions without discrimination on the basis of race, color, religion, sex, national origin, age, disability, sexual orientation, gender identity, veteran status or any other consideration made unlawful by applicable federal state or local laws.

Powered by JazzHR