Senior DevSecOps Engineer

🕒 Julho 10

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

eSimplicity

SiteLinkedInTodas as Vagas

51 - 200 funcionários

Fundada em 2016

💼 Consultoria

🏥 Saúde

⚕️ Seguro de Saúde

Consulting • Healthcare • Healthcare Insurance

A eSimplicity é uma empresa composta por designers, engenheiros e estrategistas dedicados a superar a complexidade para criar produtos e serviços premiados. A empresa foca na melhoria da experiência do cliente, no aperfeiçoamento da saúde e da vida de milhões de pessoas, além de proteger os EUA. A eSimplicity se destaca em TI para a saúde, oferecendo soluções que melhoram a cobertura e o acesso à saúde para milhões de pessoas, assegurando uma gestão de identidade eficaz para os prestadores de cuidados à saúde. Eles aproveitam a ciência de dados, o aprendizado de máquina e a inteligência artificial em diversas aplicações, desde modernizações digitais em sistemas de saúde até a gestão de espectro para telecomunicações em agências governamentais, como a Força Aérea e a Marinha. A eSimplicity está comprometida com sua missão ao inovar e se adaptar continuamente para impactar a TI federal e consultoria.

Descrição

• Partner with the development team to implement secure engineering patterns, maintain secure CI/CD pipelines, and remediate vulnerabilities, including contributing code, configuration, pipeline changes, and infrastructure updates where appropriate. • Design and maintain security gates for code quality, dependency scanning, container image scanning, secrets detection, infrastructure misconfiguration, and policy compliance. • Support Kubernetes and container security for AWS EKS environments, including image hardening, admission controls, runtime monitoring, network policies, workload identity, secrets management, and least-privilege access patterns. • Support controls for new tooling/integration usage, the handling of sensitive data, and access controls. • Help define and enforce secure-by-default engineering standards across the application, infrastructure, and delivery pipeline. • Help drive the move toward ATO and near-real-time compliance. • Implement monitoring of production runtime environments for vulnerabilities and compliance drift and make security and compliance reporting available on demand. • Translate security findings into actionable engineering work items in JIRA and support teams through remediation, validation, and closure. • Identify, document, and communicate security risks tied to modernization efforts • Monitor cloud environments using AWS tools • Participates in Agile processes including daily standups, demos, retrospectives, and sprint planning • Collaborates with a fully integrated Agile team to deliver continuous improvement to designs, processes, and standards

🎯 Requisitos

• Bachelor’s degree and four (4) years of specialized information technology experience; OR In lieu of bachelor’s degree, eight (8) years of relevant information technology experience, with at least four (4) years in a specialized experience • Must be a United States citizen • Ability to obtain and maintain a Public Trust clearance • Hands-on experience building and maintaining secure CI/CD pipelines, including automated security testing, vulnerability scanning, secrets detection, artifact signing, and release gates. • Experience with security automation tools such as SAST, SCA, DAST, container scanning, IaC scanning, secrets scanning, SBOM generation, and policy-as-code. • Ability to write scripts, pipeline logic, configuration, or automation in support of security and compliance objectives. • Hands-on experience securing AWS cloud environments including EKS, S3, VPC, Security Hub, Inspector, WAF, and Secrets Manager • Experience producing security and compliance evidence for federal environments, including continuous monitoring artifacts, control evidence, vulnerability reports, and audit-ready documentation • Understanding of the Authority to Operate (ATO) process, including POA&Ms and continuous monitoring. • Understanding of federal security frameworks such as NIST RMF • Experience working on a fully integrated Agile product team • Strong documentation and problem-solving skills • Ability to work in a fast-paced, team-oriented environment • Experience with Atlassian Jira/Confluence

🏖️ Benefícios

• medical, dental, and vision coverage • 401(k) retirement benefits • paid time off • paid holidays • life and disability insurance • additional wellness and employee support programs