Principal Cloud Developer – DevSecOps

This is a fully remote position, open to applicants in United States.

📋 Description

• Deliver DevSecOps platform services that seamlessly incorporate security, compliance, and monitoring throughout all stages of cloud infrastructure and data products lifecycle management.

• Implement IT Security Office approved automated security controls, managing vulnerability processes, ensuring policy compliance, and enabling continuous monitoring.

• Uphold secure and stable systems that facilitate continuous integration and delivery, mitigate operational risk, and enhance enterprise agility.

• Conduct ongoing scanning of all source and executable repositories to identify emerging threats after services have been deployed.

• Guarantee that all code and Infrastructure as Code (IaC) changes are version-controlled, peer-reviewed, security-scanned, and authorized before being moved to production.

• Maintain continuous monitoring and alerting for all production deployments, ensuring rollback procedures are established.

• Provide CI/CD pipelines and workflows for building, testing, and deploying applications, promoting workloads across environments with automated controls and approvals.

• Integrate security and compliance assessments within CI/CD pipelines.

• Document all DevSecOps procedures, standards, and toolset configurations, ensuring version-controlled documentation is accessible to stakeholders.

• Embed change control gates into the automated CI/CD workflow to enforce appropriate measures that prevent unauthorized or unreviewed code deployments to production.

• Collaborate with AO teams to define and uphold standards for DevSecOps processes and toolsets, ensuring integration and interoperability across the enterprise ecosystem.

• Enable integration with third-party development, operations, and security tools to facilitate end-to-end visibility and control.

• Provide detailed end-user guides and training materials for containerized pipeline functionalities and security practices aimed at development team members.

• Regularly review and update DevSecOps practices and toolsets to encompass emerging technologies, threat intelligence, and lessons learned.

• Generate DevSecOps metrics reports (e.g., deployment frequency, mean time to resolution, vulnerability remediation time) to showcase effectiveness and promote continuous improvement.

⛳️ Requirements

• Over 5 years of experience in IT system engineering, systems development, coding, and programming.

• Extensive experience in implementing and supporting comprehensive automated DevSecOps pipelines (CI/CD) and related processes.

• Strong foundation in Infrastructure as Code.

• Familiarity with large-scale infrastructure migration methodologies and techniques (IaaS/PaaS), including application migrations to cloud platforms such as AWS.

• Proven experience in developing, testing, and maintaining containerized applications.

• In-depth understanding of security compliance and security controls.

• Knowledge of Linux is essential for this role.

• Skilled in applying DevSecOps practices using tools like Jenkins, GitLab, or similar.

• Exceptional presentation and communication abilities (both oral and written).

• A consultant mindset, capable of engaging with high-level customer stakeholders and fostering excellent customer relationships.

• Experience in identifying and implementing industry tools, solutions, methods, best practices, and emerging technologies.

• Strong analytical and problem-solving abilities, with the capacity to formulate and articulate recommendations for enhancement.

• Proven capability to work effectively, both independently and collaboratively within a team.

• A minimum of one certification at any level for one or more of the following cloud platforms is required: Microsoft Azure, Google Cloud Platform, Amazon Web Services (AWS), or Oracle Cloud.

🏝️ Benefits

• Comprehensive benefits and wellness packages.

• 401K plan with company matching.

• Competitive salary and paid time off.

• Flexible work weeks when possible.

• Paid parental leave.

• Paid military leave.

• Paid bereavement leave.

• Jury duty leave.