Senior DevSecOps Engineer

🕒 Abril 13

🏄 California – Remoto

🏄 California – Remote

💵 $140.000 - $160.000 / ano

⏰ Tempo Integral

🟠 Sênior

⛑ DevOps & Engenheiro de Confiabilidade do Site (SRE)

👻 Score fantasma 35%

O que significa: quão provável esta vaga está aberta sem contratação ativa.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

Integrated Data Services

SiteLinkedInTodas as Vagas

201 - 500 funcionários

Fundada em 1997

💼 Consultoria

🎖️ Defesa

📦 Logística

Consulting • Defense • Logistics

A Integrated Data Services é uma fornecedora experiente de sistemas de informação inovadores e serviços de suporte, servindo principalmente ao Governo Federal desde 1997. A empresa é especializada no desenvolvimento de aplicações de software, inteligência de negócios, análise de dados e soluções de gestão de programas, destacando-se seu produto principal, o CCaR™, que é utilizado por vários ramos do Departamento de Defesa e agências federais. A Integrated Data Services é dedicada a melhorar a eficiência operacional através de aplicativos empresariais personalizados e designs centrados no usuário, garantindo que seus clientes estejam equipados com ferramentas robustas para tomada de decisão e supervisão de programas.

Descrição

• Architecting and implementing secure CI/CD pipelines. • Managing Kubernetes clusters. • Deploying infrastructure as code using Terraform/OpenTofu. • Embedding security controls throughout the software development lifecycle. • Collaborating across development, operations, and security teams to build resilient, secure systems. • Expanding skill set by working with emerging security tools and implementing compliance-as-code frameworks.

🎯 Requisitos

• 3+ years of experience in AWS cloud services (EC2, ECS/EKS, S3, Lambda, RDS, ALB, VPC, IAM) is required. • 3+ years of experience in Container technologies (Docker and/or Podman) is required. • 3+ years of experience in CI/CD pipelines (Jenkins, GitLab CI, GitHub Actions, or similar) is required. • 3+ years of experience in Git version control and branching strategies is required. • 2+ years of experience in Infrastructure as Code (Terraform and/or OpenTofu) is required. • 2+ years of experience in Kubernetes orchestration (deployment, scaling, monitoring, troubleshooting) is required. • 2+ years of experience in Configuration management (Ansible, Chef, or Puppet) is preferred. • 2+ years of experience in Monitoring and observability (Prometheus, Grafana, ELK stack, CloudWatch) is preferred. • 3+ years of experience in DevSecOps practices (security automation, shift-left security) is required. • 2+ years of experience in Container security scanning (Trivy, Aqua, Twistlock, Anchore, or similar) is required. • 2+ years of experience in Static/Dynamic Application Security Testing (SAST/DAST tools like SonarQube, Checkmarx, OWASP ZAP) is required. • 2+ years of experience in Integrating security gates into CI/CD pipelines is required. • 2+ years of experience in Secrets management (Vault, AWS Secrets Manager, or similar) is required. • 2+ years of experience in Vulnerability management and remediation workflows is required. • 1+ years of experience in Software Composition Analysis for dependency scanning (Trivy, Snyk, or similar) is preferred. • 2+ years of experience in Security compliance frameworks (NIST, STIG, CIS benchmarks, FedRAMP) is required. • 2+ years of experience in Security hardening and baseline configuration is required. • 2+ years of experience in Audit logging and security event monitoring is required. • 2+ years of experience in Identity and Access Management (IAM policies, RBAC) is required. • 2+ years of experience in Network security (security groups, NACLs, WAF, network segmentation) is required. • 1+ years of experience in Certificate management and PKI is required. • 2+ years of experience in Security code review practices is preferred. • 2+ years of experience in Container and Kubernetes security (Pod Security Standards, Network Policies, image signing) is preferred. • 2+ years of experience in API gateway management is preferred. • 1+ years of experience in ETL platforms (Talend and/or Apigee) is preferred. • 3+ years of experience in Scripting languages (Python, Bash, or Go) is required. • 3+ years of experience in YAML/JSON configuration is required. • Must have security mindset and risk assessment thinking. • Must have strong problem-solving and troubleshooting abilities. • Must be able to balance security requirements with development velocity. • Cross-functional collaboration with development and operations teams is required. • Documentation and knowledge sharing is required. • Communication of security risks to technical and non-technical stakeholders is required. • Incident response and on-call readiness is required. • Staying current with emerging security threats and vulnerabilities is required.

🏖️ Benefícios

• employer paid health, dental, vision, disability, AD&D and life insurance plans for eligible employees. • flexible spending accounts. • voluntary life insurance. • supplemental insurance plans. • eleven (11) paid holidays. • generous PTO accruals starting at three (3) weeks per year. • 401(k) safe harbor contribution upon eligibility. • generous employee referral bonuses.