Cloud DevSecOps Engineer

Serco is hiring a Cloud DevSecOps Engineer to support secure, reliable, and automated delivery of applications and infrastructure across AWS GovCloud and Commercial Cloud environments. The role focuses on configuration management, CI/CD pipelines, container deployments, release engineering, and secure software delivery in collaboration with development, infrastructure, cybersecurity, and operations teams.

Responsibilities:

• Support applications and systems operating within AWS GovCloud and AWS Commercial Cloud environments.- Develop, maintain, and enforce software configuration management tools, standards, and processes supporting configuration identification, control, status accounting, reporting, and software delivery
• Perform configuration management, DevSecOps, and release engineering activities for internally developed and commercial-off-the-shelf software
• Ensure software builds are created, validated, and delivered to development, test, training, and production environments
• Document software operating parameters, deployment procedures, configuration baselines, and release artifacts
• Ensure deployments comply with established configuration management standards, security requirements, and operational sustainment needs
• Design, develop, automate, and maintain continuous integration and continuous delivery (CI/CD) pipelines
• Develop and support container-based build and deployment processes
• Administer and maintain DevSecOps and configuration management toolsets, including Jenkins, Nexus, and Atlassian applications
• Automate build, packaging, testing, release, and deployment activities using scripting and infrastructure automation tools
• Troubleshoot build, deployment, configuration, and environment issues in coordination with software development, infrastructure, cybersecurity, and operations teams
• Provide basic Linux system administration support for development and test environments
• Design and implement procedures, standards, and technical documentation that support software development, deployment, and sustainment
• Develop configuration management standards and help ensure consistent adherence across all software deployments
• Train and assist developers in the use of configuration management, source control, build automation, and deployment tools
• Support implementation of security controls and secure development practices throughout the software delivery lifecycle
• Identify opportunities to improve automation, reliability, repeatability, security, and visibility across the DevSecOps toolchain

Requirements:

• The ability to obtain and maintain a Secret security clearance
• A Bachelor's degree in Information Technology, Cybersecurity, Information Systems, Computer Science, or Data Science
• Candidates with a non-related degree may substitute a current CompTIA Security+ or equivalent DoD 8570/8140-compliant certification
• 5 years of professional experience supporting software development, software configuration management, DevSecOps, release engineering, or related functions in Linux-based or cloud-hosted environments
• Understanding of cloud infrastructure, DevSecOps automation concepts, and associated toolsets
• Experience automating application builds and deployments using Maven, Red Hat Package Manager (RPM), or similar technologies
• Previous experience with container technologies such as Docker and container orchestration platforms such as Amazon Elastic Container Service (ECS) and Amazon Elastic Kubernetes Service (EKS)
• Experience developing scripts and automation solutions using languages such as Bash, Python, Perl, or similar languages
• Previous experience with configuration management, CI/CD, and automation tools such as Jenkins, AWS Code Commit, AWS Code Build, AWS Code Deploy, Ansible, Chef, Puppet, or similar platforms
• Experience supporting Linux operating systems
• Experience with AWS cloud automation and workflow services, including AWS CloudFormation, AWS Lambda, AWS CodeCommit, AWS CodeBuild, AWS CodeDeploy, and AWS CodePipeline
• Experience supporting AWS GovCloud environments
• Knowledge of public key infrastructure (PKI), certificate-based authentication, and single sign-on (SSO) solutions
• Knowledge of Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs), cybersecurity principles, and secure configuration practices
• Knowledge of Apache HTTP Server, Apache Tomcat, and relational or cloud database platforms, including Oracle, Microsoft SQL Server, Amazon Redshift, or similar technologies
• Knowledge of web services installation, setup, configuration, and troubleshooting
• Knowledge of networking and communications concepts, including ports, protocols, routing, DNS, load balancing, and secure connectivity
• Experience supporting Agile software development teams and DevSecOps practices in a government or regulated environment
• Experience developing technical documentation, standard operating procedures, deployment guides, and configuration management artifacts