DevSecOps Cloud Engineer
Role details
Job location
Tech stack
Job description
Gray Analytics is seeking a skilled DevSecOps Cloud Engineer with a strong focus on Azure and AWS cloud service providers (CSPs), emphasizing security, collaboration, and efficiency. The ideal candidate will have a passion for designing, implementing, and maintaining secure, scalable, and resilient cloud infrastructures. This position requires someone who excels in cloud computing and is passionate about integrating security into the development lifecycle, working closely with our DevSecOps team. The candidate will support projects of varying classification levels and will contribute to the establishment and maintenance of secure, resilient cloud environments., * Architect and deploy secure cloud solutions on Azure and AWS, ensuring systems are scalable and resilient and meet DoD compliance and security requirements.
- Design and implement cloud-native architectures, including:
- Azure: Active Directory, Virtual Machines, Kubernetes Service, Virtual Network, Storage solutions, SQL Database & Cosmos DB, Security Center, and Sentinel.
- AWS: EC2, ECS/EKS, VPC, S3 & Glacier, RDS & DynamoDB, Lambda, IAM, CloudFormation, and SAM.
- Design, deploy, and maintain cloud infrastructure services using AWS, Azure, and specifically Azure GovCloud, based on business requirements.
- Lead security initiatives within the cloud environment, including implementing security controls, vulnerability management, and compliance auditing.
- Implement best practices for cloud security, including IAM policies, encryption, and monitoring, focusing on compliance standards relevant to government cloud environments.
- Ensure compliance with industry standards, regulations, and Missile Defense Agency cybersecurity and IT policies and procedures, especially in government or regulated sectors.
- Collaborate with the DevSecOps team to refine CI/CD pipelines, integrating security testing and compliance checks for secure code deployment.
- Facilitating seamless integration of cloud and system administration tasks focusing on automation, security, and continuous improvement.
- Conduct regular performance and security assessments of cloud infrastructures, working in tandem with the DevSecOps team to optimize system performance and resolve any issues promptly.
- Develop and maintain Infrastructure as Code (IaC) using tools like Terraform and Azure Resource Manager (ARM) templates to ensure consistent and repeatable deployments.
- Stay abreast of the latest in cloud technologies, security practices, and compliance standards, sharing knowledge and best practices to foster a culture of continuous learning and improvement.
Requirements
Do you have experience in Version control systems?, * Minimum of active DoD Secret Clearance.
- Bachelor's degree in Computer Science, Engineering, or a related field (or equivalent work experience).
- Minimum of 5 years of experience in cloud engineering, with demonstrable expertise in Azure and AWS and a commitment to security best practices.
- Proficiency in scripting and automation using Python, Bash, or similar languages.
- Experience with containerization and orchestration tools (Docker, Kubernetes).
- Familiarity with CI/CD pipelines and version control systems (Git).
- Strong understanding of cloud computing concepts, including IaaS, PaaS, and SaaS.
- Proficient in the use of DevSecOps tools and methodologies, with a strong foundation in scripting and automation (e.g., Terraform, Ansible, Jenkins).
- Experience with virtualization and infrastructure tools such as VMware vCenter, Nutanix, Veeam, NetBox, iDRAC, Dell OpenManage, and Eaton UPS.
- Demonstrated expertise in:
- Azure and AWS Services: Deep understanding and hands-on experience with key services including Azure AD, VMs, AKS, Azure Virtual Network, AWS EC2, ECS, VPC, and IAM.
- Cloud Security Best Practices: Knowledge of encryption, identity and access management, network security, and compliance policies.
- Monitoring and Logging: Experience with AWS CloudWatch, Azure Monitor, and other monitoring tools.
- Cost Management: Ability to analyze and optimize cloud spending.
- Experience maintaining DoD-approved cloud services at varied classification levels and familiarity with networking concepts, including VPNs, VPCs, VNETs, load balancing, and network security groups.
- Solid understanding of network security and system administration principles, capable of effective cross-functional collaboration., * Relevant cloud certifications (e.g., AWS Certified Solutions Architect, Azure Administrator, etc.), including specific certifications related to government cloud environments.
- Certifications include Azure Solutions Architect Expert, AWS Solutions Architect Professional, or relevant cloud security certifications.
- Experience with big data technologies (Hadoop, Spark) and serverless computing, and online Collaboration tools (e.g., Teams, SharePoint, JIRA).
- Knowledge of hybrid cloud architectures and migration strategies.
- Familiarity with DevOps practices and tools.
- Experience with Missile Defense Agency cybersecurity and IT policies and procedures, and with developing formal builds within the DoD industry.
- Experience with Agile software development methodology, Git configuration management, and automating repetitive system administration tasks.
- Experience with single sign-on and multi-factor authentication guidelines and oversight, and maintaining operation of Red Hat Enterprise Linux (RHEL) computer systems.
- Prior experience supporting DoD programs and customers.
Benefits & conditions
Pulled from the full job description
- Professional development assistance
- Pet insurance
- 401(k) matching
- Paid time off
- Flexible spending account
- Disability insurance