[Hiring] Senior DevSecOps Engineer @Tria Federal

Role Description

Softrams is seeking a seasoned Sr. DevSecOps Engineer to drive critical infrastructure changes through Infrastructure as Code (IaC) while ensuring the security of high-profile applications. The ideal candidate will have extensive experience with:

• Provisioning, updating, and removing resources or environments
• Writing, updating, and running Terraform code
• Managing database updates
• Resizing resources based on load and performance metrics
• Monitoring the certificate management process (e.g., requests, automated rotations, and audits)
• Monitoring application performance
• Integrating monitoring tools with other services
• Creating or updating dashboards, alerts, and policies
• Responding to infrastructure-related incidents
• Expertise in CI/CD processes and troubleshooting job issues

This role will be responsible for managing key infrastructure in the healthcare sector.

Qualifications

• Ability to obtain a U.S. Federal Position of Trust clearance designation
• Must reside in and be able to perform work in the United States
• Must have lived in the United States for 3 of the last 5 years
• Meet or exceed one of the following requirements:
  • Bachelor of Technology with more than 5 years of experience
  • AA degree with 7 years of experience
  • Comparable level certification with more than 9 years of experience in IT Requirements development and documentation

Requirements

• Experience with the following tools:
  • AWS IAM
  • AWS Fargate
  • AWS RDS
  • AWS ALB
  • AWS SSM
  • Cert Mgr
  • Security Hub, etc.
  • Terraform
  • CB Core
  • Akamai
  • New Relic
  • Splunk
  • LaunchDarkly
  • Sonarqube
  • Snyk
  • Datadog
  • Akamai Gateway
• Technology Requirements:
  • Infrastructure and networking (AWS and otherwise)
  • Provisioning, updating, removing AWS resources or environments
  • Writing, updating and running Terraform code
  • RDS database updates (version patches, maintenance)
  • Sizing up/down existing resources based on load and performance
  • IAM roles and policies used internally, external cross account role access for data sharing (incoming/outgoing)
  • Maintenance and building of networks utilizing VPC, Security Groups, Cisco VPN and Peering
  • Working with Akamai on DNS or resource property updates
• Security Tooling / Skillset:
  • OWASP ZAP
  • Burp Suite
  • Snyk
  • Penetration Testing
  • Security Impact Analysis
  • Certificate Management
• Monitoring Application Experience:
  • Configuring integration between New Relic and other services (AWS, Splunk On-Call, Slack, etc.)
  • Creating or updating dashboards, alerts, synthetics, policies
  • Troubleshooting problems and responding to incidents when infrastructure is involved
• CI/CD:
  • Creating and updating jobs in CBCore Jenkins
  • Troubleshooting problems when jobs are not successful
• Strong analytical and problem-solving skills

Responsibilities

• Extensive experience with Infrastructure as Code (IaC) with proficiency in writing, updating, and running Terraform code
• Strong understanding of AWS and other cloud providers for provisioning, updating, and removing cloud resources or environments
• Proficiency in managing RDS database updates, including version patches and maintenance
• Ability to size up/down resources based on load and performance
• Experience configuring and managing IAM roles and policies
• Knowledge of internal and external cross-account role access for data sharing
• Expertise in maintaining and building networks utilizing VPC, Security Groups, VPN, and Peering
• Working with DNS and resource property updates
• Managing new certificate requests, renewing expiring certificates through automated rotation, and certificate auditing
• Configuring integration between monitoring tools (e.g., New Relic) and other services
• Creating or updating dashboards, alerts, synthetics, and policies
• Proficiency in troubleshooting infrastructure-related problems and responding to incidents
• Experience creating and updating jobs in Jenkins or equivalent CI/CD tools
• Troubleshooting CI/CD job failures and ensuring successful deployments
• Excellent communication and collaboration skills
• Relevant certifications (preferred) such as AWS Certified Solutions Architect, Certified Kubernetes Security Specialist (CKS), Terraform Certification, or equivalent

Benefits

• Top-tier benefits package to invest in your physical, mental, and financial health and wellness
• Opportunities to learn new skills, seize new challenges, and advance your career