Job DescriptionPosition Description: Core4ce is hiring a Senior DevSecOps Engineer to support a large, secure Department of War (DoW) Security Operations Center (SOC). This is a hands-on engineering role responsible for engineering, automating, securing, maintaining, and troubleshooting SOC systems, as well as integrating subscribers with SOC services and the technologies that support them.
The ideal candidate will have deep, demonstrated system and network integration and troubleshooting experience, preferably including Kubernetes and other container technologies, along with strong Infrastructure as Code (IaC), CI/CD, Linux, cloud, automation, and troubleshooting skills.
This position requires more than expertise with individual tools. The successful candidate will understand how the components integrate and work together and will be capable of troubleshooting complex problems across Kubernetes, Linux, cloud infrastructure, networking, security, identity, CI/CD pipelines, and application workloads.
Strong communication and customer interaction skills are essential. This engineer will work directly with application and subscriber support teams as well as directly with subscribers to understand requirements, resolve technical issues, and help teams successfully implement SOC tools.
As a senior member of the engineering team, this individual will also be expected to provide advanced technical input and mentor less experienced engineers.
Responsibilities:- Engineer, administer, maintain, upgrade, secure, and troubleshoot enterprise Kubernetes and Red Hat OpenShift environments supporting development, staging, and production workloads.
- Develop and maintain Infrastructure as Code (IaC) and configuration automation using technologies such as Terraform and Ansible/Ansible Automation Platform.
- Design, develop, maintain, and troubleshoot CI/CD pipelines supporting automated software build, testing, security scanning, artifact management, and deployment.
- Troubleshoot complex technical problems spanning Kubernetes/OpenShift, Linux, cloud infrastructure, networking, DNS, certificates, authentication, storage, containers, CI/CD pipelines, and application workloads.
- Work directly with customers and application teams to understand technical requirements, identify pain points, evaluate solutions, and resolve platform and application deployment issues.
- Implement and support security throughout delivery lifecycle, including vulnerability scanning, container security, secrets management, artifact security, software supply-chain security, and Software Bills of Materials (SBOMs).
- Support vulnerability remediation, system hardening, cybersecurity compliance, and authorization/accreditation activities.
- Support container registries, artifact repositories, identity and access management, security scanning, and related DevSecOps platform services.
- Monitor and optimize system resources, including performance, capacity, availability, serviceability, and recoverability.
- Develop and maintain technical documentation, system administration procedures, troubleshooting guides, engineering standards, and standard operating procedures.
- Participate in system architecture, platform modernization, and technology evaluation efforts.
- Provide technical guidance, mentoring, knowledge sharing, and troubleshooting assistance to other engineers.
- Participate in technical and code reviews and help establish engineering standards and best practices across the team.
- Collaborate with cloud, infrastructure, networking, cybersecurity, application development, and customer teams to resolve issues that cross technical boundaries.
- Required to work on-site in a secured DoW facility to perform engineering and support duties.
This position is designed to be flexible, with responsibilities evolving to meet business needs and enable individual growth.
Requirements:- Active Top Secret/SCI security clearance.
- Minimum of five (5) years of demonstrated hands-on experience engineering, administering, and troubleshooting Linux systems administration and troubleshooting experience, preferably with Red Hat Enterprise Linux (RHEL).
- Demonstrated experience with Kubernetes environments. Experience should include installation, configuration, operation, upgrades, troubleshooting, and maintenance of development, staging, and/or production Kubernetes environments.
- Demonstrated experience developing and maintaining Infrastructure as Code (IaC) using technologies such as Terraform.
- Demonstrated experience with configuration management and infrastructure automation using technologies such as Terraform and Ansible.
- Strong understanding of network protocols and services, with demonstrated hands-on experience troubleshooting networks across virtualized and data center environments.
- Strong hands-on experience designing, maintaining, and troubleshooting CI/CD pipelines.
- Experience with Git-based development workflows and platforms such as GitLab.
- Strong understanding of containers, container images, container registries, and container lifecycle management.
- Strong understanding of Kubernetes concepts including networking, ingress, DNS, storage, RBAC, certificates, secrets, resource management, workload scheduling, deployments, services, and cluster operations.
- Demonstrated ability to troubleshoot complex technical issues across multiple layers of infrastructure and software.
- Experience with cloud infrastructure and services, preferably Amazon Web Services (AWS).
- Experience with virtual infrastructure application, preferably VMWare vSphere.
- Experience implementing or supporting security controls and automated security testing within DevSecOps environments.
- Demonstrated experience working directly with customers or application teams to gather requirements, troubleshoot issues, and develop technical solutions.
- Strong written and verbal communication skills with the ability to communicate complex technical issues to both technical and non-technical audiences.
- Demonstrated ability to mentor engineers and provide technical guidance to other team members.
Preferred Qualifications:- Significant hands-on engineering and administration experience with Red Hat OpenShift.
- Experience migrating Kubernetes platforms and application workloads to Red Hat OpenShift.
- Experience with Rancher and RKE2 Kubernetes environments.
- Experience operating Kubernetes/OpenShift workloads within AWS, including AWS GovCloud.
- Experience with GitLab Ultimate and enterprise CI/CD environments.
- Experience with container and DevSecOps technologies such as Harbor, Trivy, Red Hat Advanced Cluster Security (RHACS), HashiCorp Vault, and Artifactory.
- Experience implementing or supporting SBOMs, preferably using CycloneDX, and software supply-chain security practices.
- Experience with observability and monitoring technologies such as Prometheus, Grafana, Splunk, and OpenTelemetry.
- Experience with identity and access management technologies such as Keycloak.
- Experience with container registries, artifact repositories, vulnerability scanning, image promotion, and secure software delivery practices.
- Experience with F5/NGINX, AppProtect, and Palo Alto.
- Experience with database management of MySQL and PostgreSQL.
- Familiarity with Zero Trust principles and their application to cloud-native applications and workloads.
- Experience working within a DoD, federal government, healthcare, or other highly regulated environment.
- Experience navigating DoD cybersecurity, network, access, authorization, and accreditation requirements.
- Experience supporting platform modernization or large-scale Kubernetes/OpenShift migration initiatives.
- Experience working in a DevOps or DevSecOps environment using Agile methodologies.
- Certifications such as Red Hat Certified System Administrator (RHCSA), Red Hat Certified Engineer (RHCE), or CompTIA Linux+
