Senior DevSecOps Engineer
Senior DevSecOps EngineerRemote (United States)Tria Federal delivers digital services and technology solutions that support the health and safety of veterans, service members and civilians. For two decades, federal agencies have relied on Tria companies to advance their critical missions and modernize their systems, so that they can uphold their commitment to the American people. Today, we are pushing the boundaries of possibility through partnerships and investments in artificial intelligence and emerging technologies, developing solutions for the biggest challenges that government will face tomorrow.We are proud to employ and support military veterans who bring mission-first mindset, technical expertise, and leadership qualities that strengthen our work. Veterans, transitioning service members, and military spouses are strongly encouraged to apply.Job Description:Softrams is seeking a seasoned Sr. DevSecOps Engineer to drive critical infrastructure changes through Infrastructure as Code (IaC) while ensuring the security of high-profile applications. The ideal candidate will have extensive experience with provisioning, updating, and removing resources or environments, writing, updating, and running Terraform code, managing database updates, and resizing resources based on load and performance metrics.Additionally, the role involves monitoring the certificate management process (e.g., requests, automated rotations, and audits). The Sr. DevSecOps Engineer will also monitor application performance, integrate monitoring tools with other services, create or update dashboards, alerts, and policies, and respond to infrastructure-related incidents. Expertise in CI/CD processes and the ability to troubleshoot job issues are essential. This role will be responsible for managing key infrastructure in the healthcare sector.Basic Requirements:Ability to obtain a U.S. Federal Position of Trust clearance designation.Must reside in and be able to perform work in the United States.Must have lived in the United States for 3 of the last 5 years.Meet or exceed one of the following requirements:Bachelor of Technology more than 5 years of experience orAA degree with 7 years of experience orComparable level certification with more than 9 years of experience in IT Requirements development and documentationExperience with the following tools:AWS IAMAWS FargateAWS RDSAWS ALBAWS SSMCert MgrSecurity Hub, etcTerraformCB CoreAkamaiNew RelicSplunkLaunchDarklySonarqubeSnykDatadogAkamai GatewayTechnology Requirements:Infrastructure and networking (AWS and otherwise)Provisioning, updating, removing AWS resources or environmentsWriting, updating and running Terraform codeRDS database updates (version patches, maintenance)Sizing up/down existing resources based on load and performanceIAM roles and policies used internally, external cross account role access for data sharing (incoming/outgoing)Maintenance and building of networks utilizing VPC, Security Groups, Cisco VPN and Peering.Working with Akamai on DNS or resource property updatesSecurity Tooling / SkillsetOWASP ZAPBurp SuiteSnykPenetration TestingSecurity Impact AnalysisCertificate ManagementNew certificate requests, renewing expiring certificates through automated rotation, and certificate auditing.Monitoring Application ExperienceConfiguring integration between New Relic and other services (AWS, Splunk On-Call, Slack, etc)Creating or updating dashboards, alerts, synthetics, policiesTroubleshooting problems and responding to incidents when infrastructure is involvedCI/CDCreating and updating jobs in CBCore JenkinsTroubleshooting problems when jobs are not successfulExtensive experience with Infrastructure as Code (IaC) with proficiency in writing, updating, and running Terraform codeStrong understanding of AWS and other cloud providers for provisioning, updating, and removing cloud resources or environmentsProficiency in managing RDS database updates, including version patches and maintenanceAbility to size up/down resources based on load and performanceExperience configuring and managing IAM roles and policiesKnowledge of internal and external cross-account role access for data sharingExpertise in maintaining and building networks utilizing VPC, Security Groups, VPN, and PeeringWorking with DNS and resource property updatesManaging new certificate requests, renewing expiring certificates through automated rotation, and certificate auditingConfiguring integration between monitoring tools (e.g., New Relic) and other servicesCreating or updating dashboards, alerts, synthetics, and policiesProficiency in troubleshooting infrastructure-related problems and responding to incidentsExperience creating and updating jobs in Jenkins or equivalent CI/CD toolsTroubleshooting CI/CD job failures and ensuring successful deploymentsStrong analytical and problem-solving skillsResponsibilities:Extensive experience with Infrastructure as Code (IaC) with proficiency in writing, updating, and running Terraform codeStrong understanding of AWS and other cloud providers for provisioning, updating, and removing cloud resources or environmentsProficiency in managing RDS database updates, including version patches and maintenanceAbility to size up/down resources based on load and performanceExperience configuring and managing IAM roles and policiesKnowledge of internal and external cross-account role access for data sharingExpertise in maintaining and building networks utilizing VPC, Security Groups, VPN, and PeeringWorking with DNS and resource property updatesManaging new certificate requests, renewing expiring certificates through automated rotation, and certificate auditingConfiguring integration between monitoring tools (e.g., New Relic) and other servicesCreating or updating dashboards, alerts, synthetics, and policiesProficiency in troubleshooting infrastructure-related problems and responding to incidentsExperience creating and updating jobs in Jenkins or equivalent CI/CD toolsTroubleshooting CI/CD job failures and ensuring successful deploymentsStrong analytical and problem-solving skillsExcellent communication and collaboration skillsRelevant certifications (preferred) such as AWS Certified Solutions Architect, Certified Kubernetes Security Specialist (CKS), Terraform Certification, or equivalentWhy Tria?What defines the Tria brand is more than just our dedication to excellence in our craft; it's our incredible team of dedicated, talented, and passionate people that make Tria so exceptional. As people powering possible, we are all partners in our team's shared success.As a company that cares about people, we seek to cultivate a culture in which all can thrive personally and professionally. We offer a top-tier benefits package to invest in your physical, mental, and financial health and wellness so that you can be your best self - at work and in life. At Tria, we are growth-minded, entrepreneurial in spirit, and committed to fostering a culture of inclusion and opportunity for all. Whatever your background, your role, your department, or stage in your professional journey, here you will have opportunities to learn new skills, seize new challenges, and advance your career as we grow.California Consumer Privacy Act (CCPA)We are committed to protecting your privacy. As part of our compliance with the California Consumer Privacy Act (CCPA), we want to inform you about how we collect, use, and protect your personal information during the job application process. For more details, please review https://www.oag.ca.gov/privacy/ccpa.