DevSecOps Engineer

This is a fully remote position, open to applicants in California, +1 more state.

📋 Description

• Deploy, configure, maintain, and troubleshoot Active Directory and Domain Controller environments within hybrid or on-premise Windows settings.

• Ensure the integrity and security of Active Directory forests, domains, and trusted environments.

• Strengthen Active Directory/Domain Controller configurations in accordance with DoD STIG compliance and industry best practices.

• Manage Group Policy Objects and enforce security protocols.

• Implement monitoring, logging, and auditing for Active Directory/Domain Controller performance and security.

• Apply Role-Based Access Control (RBAC), namespace isolation, and secure ingress/egress traffic configurations.

• Create AWS Amazon Machine Images (AMIs) for Windows Servers utilizing Packer, Ansible, and PowerShell.

• Operate in secure, air-gapped IL5 environments while executing compliance processes.

• Maintain the security and availability of Windows and Linux systems through patch management, vulnerability assessments, and compliance with policies.

• Automate repetitive tasks using PowerShell, Ansible, Python, and Bash.

• Troubleshoot issues related to Windows file systems, network connectivity, performance, and authentication.

• Plan and carry out upgrades, migrations, and installations for Windows and Linux systems.

• Collaborate with developers, system administrators, and cybersecurity professionals to enhance systems integration and operational efficiency.

• Create technical documentation, which includes CI/CD pipeline configurations, workflow processes, and build instructions.

⛳️ Requirements

• Bachelor of Science degree accompanied by six years of relevant experience.

• Security+ certification is required.

• Active Secret clearance is mandatory.

• In-depth knowledge of Active Directory architecture, replication, forests, and domains.

• Proficiency in Windows Server administration, including roles and features.

• Familiarity with NIST or ISO security frameworks and their implementation in Active Directory/Domain Controller settings.

• Experience in integrating authentication and Single Sign-On (SSO) solutions, such as Keycloak, Active Directory, SAML, and RBAC.

• Proficient with GitLab CI/CD and Git-based workflows.

• Experience in secure Impact Level 6 or similarly controlled environments, along with DoD or equivalent compliance frameworks.

• Practical knowledge of image scanning tools like Anchore.

• Familiarity with static code analysis tools such as SonarQube.

• Experience with software signing tools like Cosign.

• Hands-on experience in container hardening and vulnerability remediation.

• Strong skills in scripting and automation.

• Proficiency in Terraform, Helm, or Ansible for Infrastructure as Code.

• Capability to convey complex technical concepts to both technical and non-technical stakeholders.

• Experience working collaboratively in multidisciplinary Agile or DevSecOps teams.

🏝️ Benefits

• Comprehensive health, dental, and vision insurance.

• Retirement savings plan with company matching contributions.

• Opportunities for professional development and training.

• Flexible work hours and remote work options.

• Employee discounts and wellness programs.