DevSecOps Engineer

As a DevSecOps Engineer, you will play a crucial role in bridging the gap between development, security, and operations within Ursa Major. This position will focus on supporting system administration by automating processes, ensuring security best practices, and enhancing collaboration across teams.

Responsibilities:

        Automation

• Develop and maintain automation scripts and tools using scripting languages like Bash, Python, Go, or PowerShell.
• Automate infrastructure provisioning, configuration management, and deployment processes using tools like Terraform, Ansible, or Puppet.
• Automate security testing and vulnerability scanning.
• Implement continuous integration/continuous delivery (CI/CD) pipelines to streamline the software development lifecycle.

        Security

• Integrate security practices into the development and deployment processes.
• Conduct security code reviews and vulnerability assessments.
• Implement security controls and measures to protect sensitive data.
• Stay up to date with the latest security threats and best practices.

        Collaboration

• Foster collaboration between development, cybersecurity, and operations teams.
• Facilitate communication and knowledge sharing among team members.
• Provide technical guidance and support to team members.

         Infrastructure Support

• Assist system administrators with infrastructure tasks, such as server provisioning, network configuration, and database management.
• Troubleshoot and resolve technical issues related to infrastructure components.
• Optimize infrastructure performance and efficiency.

Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, or equivalent experience.
• 3+ years of experience in DevSecOps or a related field.
• Strong working knowledge of Linux system fundamentals and the Linux CLI
• Strong programming skills in at least one scripting language (Bash, Python, Go, or PowerShell).
• Experience with infrastructure automation tools (Terraform, Ansible, or Puppet).
• Knowledge of CI/CD pipelines and tools (GitHub Workflows, Jenkins, GitLab CI, or CircleCI).
• Understanding of security principles and practices.
• Excellent problem-solving and analytical skills.
• Ability to work independently and as part of a team.

Desired Skills:

• Experience with containerization technologies (Kubernetes, Docker).
• Knowledge of and experience working with cloud platforms, preferably on the government-side (Microsoft GCC High or AWS Gov Cloud).
• Certifications in DevSecOps or related fields.
• Able to apply for and maintain security clearance.

Additional Notes:

• The DevSecOps Engineer will report to the IT Manager with a dotted line to the Platform Engineering Manager.
• The position may require occasional travel.

Colorado law requires us to tell you the base compensation range of this role, which is $110,000 - $140,000, determined by your education, experience, knowledge, skills, and abilities. What we can’t quantify for you are the exciting challenges, supportive team, and amazing culture we enjoy. Click here for more information about our awesome benefits.

Classification: Full-time Exempt.