Sr. Cloud Developer with DevSecOps experience

Seize your opportunity to make a personal impact supporting the Case Management Modernization (CMM) Program. The CMM program is an initiative to support the Administrative Office of the US Courts (AO) in developing a modern cloud-based solution to support all 204+ federal courts across the United States.

GDIT is your place to make meaningful contributions to challenging projects and grow a rewarding career. The Sr. Cloud Developer with DevSecOps experience will work as part of the CMM Enterprise Data Warehouse (EDW) team to deploy a secured cloud-native EDW platform and support the statutory and operational reporting, data cataloging, and other analytical objectives.

RESPONSIBILITIES

• Provide DevSecOps platform services that integrate security, compliance, and monitoring into all phases of cloud infrastructure and data products lifecycle management

• Integrate IT Security Office approved-automated security controls, orchestrating vulnerability management, administering policy compliance, and providing continuous monitoring

• Maintain secure and stable systems that enable continuous integration and delivery and reduce operational risk and support enterprise agility

• Perform continuous scanning of all source and executable repositories for evolving threats detected after services are implemented

• Ensure all code and IaC changes are version-controlled, peer-reviewed, security-scanned, and approved before promotion to production

• Maintain continuous monitoring and alerting for all production deployments, with rollback procedures in place

• Provide CI/CD pipeline and workflows for building, testing, and deploying.

• Promote workloads across environments with automated controls and approvals

• Integrate security and compliance checks into CI/CD pipelines

• Document all DevSecOps processes, standards, and toolset configurations, and maintain version-controlled documentation accessible to stakeholders

• Integrate change control gates into the automated CI/CD workflow, with appropriate controls to prevent unauthorized or unreviewed code deployments to production

• Coordinate with AO teams to establish and maintain standards for DevSecOps processes and toolsets, ensuring integration and interoperability across the enterprise ecosystem

• Facilitate integration with third-party development, operations, and security tools to enable end-to-end visibility and control

• Provide comprehensive end-user guides and training content for containerized pipeline features and security practices for the development team members.

• Conduct regular review and updates of DevSecOps practices and toolsets to incorporate emerging technologies, threat intelligence, and lessons learned

• Create DevSecOps metrics reports (example: deployment frequency, mean time to resolution, vulnerability remediation time) to demonstrate effectiveness and drive improvement

REQUIRED EXPERIENCE & QUALIFICATIONS:

• 5+ years of experience in IT system engineering, systems development, systems coding and programming.

• Strong experience implementing and supporting end-to-end automated DevSecOps pipelines (CI/CD) and processes.

• Strong background in Infrastructure as code.

• Knowledge of large-scale infrastructure migration methodologies and techniques (IaaS/PaaS) including application migrations to cloud platforms (AWS).

• Experienced in developing, testing, and maintaining containerized applications.

• Comprehensive knowledge of security compliance and security control.

• In-depth knowledge of Linux-based operating systems

Preferred:

• Experienced in using DevSecOps implementation using Jenkins, Gitlab, or similar tools.

• Certification for one or more of the following cloud platforms: Microsoft Azure, Google Cloud Platform, Amazon Web Services (AWS), and Oracle Cloud.

COMMUNICATION & ORGANIZATIONAL:

• Excellent presentation and communication (oral and written) skills

• Consultant mindset with the ability to work with high level customer stakeholders and build excellent customer relationship

• Experience identifying and applying industry tools, solutions, methods best practices, and emerging technologies

• Strong analytical skills and problem-solving skills with the ability to formulate and communicate recommendations for improvement

• Demonstrated ability to work effectively, independently, and as part of a team

GDIT IS YOUR PLACE:

At GDIT, the mission is our purpose, and our people are at the center of everything we do.

• Growth: AI-powered career tool that identifies career steps and learning opportunities

• Support: An internal mobility team focused on helping you achieve your career goals

• Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off

• Community: Award-winning culture of innovation and a military-friendly workplace

OWN YOUR OPPORTUNITY
Explore a career in cyber at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your focus on defending and protecting what matters.