DevSecOps Engineer

Responsibilities:

Develop and maintain CI/CD pipelinesusing SHIP-HATS tools ecosystem.

Configure GitLabfor version control and automated deployment workflows

Implement code quality gates using SonarQubefor static code analysis.

Manage security scanning using Fortify on Demand (FOD)for vulnerability assessment.

Oversee dependency scanning and management using Nexus IQ.

Coordinate with CloudSCAPEfor security compliance scanning and remediation.

Implement and maintain Automated Baseline Log Review (ABLR)systems.

Manage Central Accounts Management (CAM)integration for user access control.

Coordinate and resolve Vulnerability Assessment and Penetration Testing (VAPT)findings.

Ensure compliance with Personal Data Protection Impact Assessment (PDPIA)requirements

Implement and maintain Vulnerability Management System (VMS).

Manage secretsand encryption key rotationfor data protection.

implement and maintain data retention policies

Support SaaS whitelistingprocesses and approvals.

Coordinate System Security Acceptance Testing (SSAT)activities

Work closely with Data Engineers, Data Analysts, and Security Technical Teams.

Requirements:

Minimum 3 years of DevOps Engineering Experience.

Experience working in Government Environments, such as GCC

Experience in Agile Development Methodologies.

Expertise in AWS Services

Experience withGitLab CI/CD Pipelinedevelopment and management

Knowledge of security scanning tools such as SonarQube, Fortify, Nexus IQ

Strong scripting skills in Python, Bash and PowerShell

Experience withGovernment Security Clearance Processes.

Knowledge ofData Classificationand handling procedures

Understanding ofEncryption MechanismsandKey Management.

Experience with Security MonitoringandIncident Response Procedures.

Familiarity with Vulnerability Managementand remediation processes.

#J-18808-Ljbffr