Job Description
Centurion is seeking a
Senior DevSecOps Engineer to help build GitLab-based DevSecOps automated pipelines into AWS gov cloud; support and enable application delivery times on CI/CD platform; manage and operate GitLab CI/CD.
This is onsite in Washington, DC. Open to US Citizens only.
Knowledge, Skills and Experience Required:Version Control Systems
• Proficiency with Git
• Advanced knowledge of GitLab, including CI/CD pipelines, merge requests, and issue tracking
• Familiarity with branching, promotion, and release strategies (such as SemRel)
• Familiarity using internalized registries and repositories (Nexus dependency management, internal container registries, etc.)
CI/CD
• GitLab CI/CD
• GitLab runners (configuration and management)
• GitLab components (Or generally developing and utilizing templates for CI/CD jobs in any platform, such as GitHub Actions)
Cloud Platforms
• Demonstrated proficiency with AWS (Lambda, EC2, S3, EBS/EFS, ECS, EKS, SNS, CloudWatch)
Containerization
• Docker (building, deploying, and managing containers)
• Kubernetes (orchestration, deployment strategies, security, troubleshooting)
• Container security best practices
• Including container hardening strategies, such as maintaining a secure “golden” image
• Deploying and managing container-based runners hosted on EKS
• GitOps tools and deployment principles (such as ArgoCD/Flux)
Security Testing
• Static Application Security Testing (SAST)
• Dynamic Application Security Testing (DAST)
• Interactive Application Security Testing (IAST)
• Software Composition Analysis (SCA)
• Container scanning tooling (Trivy, Prisma/Twistlock, Neuvector, etc..)
Infrastructure as Code (IaC)
• Terraform (writing, managing, and optimizing Terraform configurations)
• Other IaC tools (e.g., CloudFormation, Ansible)
Scripting and Programming
• Proficiency in scripting languages (e.g., Python, Bash)
• Basic to intermediate programming skills
• Experience working with a Linux-based shell, managing way around a Linux-based system
• Ability to work well in a paired programming environment at times
Automation
• Creating and maintaining automated security checks and remediations
• Integrating security into automated deployment processes
• Incorporating linting tooling into development processes
• Incorporating unit & performance testing into deployment processes
Certifications:GitLab certification desired but not required.
AWS certification desired but not required.
Position Details:
Clearance: N/A
US Citizenship or Authorization to work in US required
Centurion Consulting Group, LLC is an Equal Opportunity Employer EOE M/F/D/V
No third parties or subcontractors