DevSecOps/Cloud Engineer at Simple Technology Solutions

RemoteFull-timeRemoteITPosted about 15 hours ago

About the Role

<div class="content-intro">At Simple Technology Solutions, our people are our priority. We know our team members are more than employees—they’re parents, friends, volunteers, artists, and athletes. That’s why we offer flexibility to help them thrive personally and professionally while delivering exceptional solutions to our Federal Government clients. Our culture is built on collaboration, continuous learning, and excellence. We are mentors and thought leaders who share knowledge and foster growth. Recognized as a “Best Place to Work,” we believe a range of perspectives helps us drive innovation and exceed customer expectations. At STS, taking care of our people isn’t a perk—it’s the standard. As a HUBZone company, we also offer special incentives for team members living in qualified HUBZones. Check out the HUBZone map <a href="https://maps.certify.sba.gov/hubzone/map#center=39.828200,-98.579500&zoom=5">HERE</a> to see if you qualify!</div>Simple Technology Solutions is looking for a DevSecOps/Cloud Engineer to add to our team. Quick Position Overview: <ul> <li style="font-family: 'trebuchet ms', geneva, sans-serif; font-size: 14pt;">US Citizenship is required</li> <li style="font-family: 'trebuchet ms', geneva, sans-serif; font-size: 14pt;">Bachelor's Degree is required</li> <li style="font-family: 'trebuchet ms', geneva, sans-serif; font-size: 14pt;">minimum of 4 years' position related experience is required</li> </ul> <span data-ccp-parastyle="Default" data-ccp-parastyle-defn="{"ObjectId":"272499da-5523-5969-b17c-4f82c0ce3910|1","ClassId":1073872969,"Properties":[469775450,"Default",201340122,"2",134233614,"true",469778129,"Default",335572020,"1",469777841,"Times New Roman",469777842,"Times New Roman",469777844,"Times New Roman",469769226,"Times New Roman",335551500,"0",201342446,"1",201342447,"5",201342448,"3",201342449,"1",469777843,"ＭＳ明朝",201341986,"1",268442635,"24"]}">The Role:  STS is looking for a DevSecOps / Cloud Engineer to join a federal data engineering team. You will own the deployment infrastructure and security controls for a large-scale federal cloud platform on AWS, keeping mission-critical systems running securely and reliably. A passion for automation, rigorous security discipline, and meticulous compliance with federal deployment standards are prerequisites for this position.  This position is contingent upon contract award.  The DevSecOps / Cloud Engineer at STS will:  <ul> <li style="font-size: 14pt; font-family: 'trebuchet ms', geneva, sans-serif;" data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1">Design, build, and maintain the program's CICD pipeline using AWS CloudFormation templates and GitHub; automate deployments to staging and production environments ensuring all deployments execute with a single command and trigger AWS Service Catalog product launches to create Lambda functions, SNS topics, and Glue jobs </li> </ul> <ul> <li style="font-size: 14pt; font-family: 'trebuchet ms', geneva, sans-serif;" data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="2" data-aria-level="1">Enforce Immutable Architecture principles across all ETL deployments; use deployment tools, CloudWatch logging, and other approved methods to ensure production and configuration environments remain consistent and controllable </li> </ul> <ul> <li style="font-size: 14pt; font-family: 'trebuchet ms', geneva, sans-serif;" data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="3" data-aria-level="1">Implement and maintain Zero Trust Architecture (ZTA) across the platform per federal Zero Trust mandates; configure and maintain IAM roles, network controls, and application-layer security controls across development, staging, and production environments </li> </ul> <ul> <li style="font-size: 14pt; font-family: 'trebuchet ms', geneva, sans-serif;" data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="4" data-aria-level="1">Integrate automated security scanning into the CICD pipeline — including SAST, OWASP ZAP dynamic scanning, dependency analysis, and government-provided container analysis tools — ensuring code delivered to production is free of medium- and high-level vulnerabilities per OWASP ASVS Level 2 </li> </ul> <ul> <li style="font-size: 14pt; font-family: 'trebuchet ms', geneva, sans-serif;" data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="5" data-aria-level="1">Ensure security scans are completed at least once per sprint and included in the Definition of Done for every user story; document and explain all false positives </li> </ul> <ul> <li style="font-size: 14pt; font-family: 'trebuchet ms', geneva, sans-serif;" data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="6" data-aria-level="1">Manage AWS Secrets Manager for ETL metadata database credentials; ensure certificates and credential configurations are valid and accessible across all environments </li> </ul> <ul> <li style="font-size: 14pt; font-family: 'trebuchet ms', geneva, sans-serif;" data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="7" data-aria-level="1">Conduct periodic load and performance testing; collaborate with the IV&V team to resolve findings </li> </ul> <ul> <li style="font-size: 14pt; font-family: 'trebuchet ms', geneva, sans-serif;" data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="8" data-aria-level="1">Manage the Change Control Board (CCB) submission process; ensure Change Requests are submitted within required timelines and project closeout checklists are completed following successful production deployments </li> </ul> <ul> <li style="font-size: 14pt; font-family: 'trebuchet ms', geneva, sans-serif;" data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="9" data-aria-level="1">Support disaster recovery exercises and actual events to ensure production data loads continue as expected; maintain runbooks and operational procedures </li> </ul> <ul> <li style="font-size: 14pt; font-family: 'trebuchet ms', geneva, sans-serif;" data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="10" data-aria-level="1">Ensure compliance with FISMA, NIST 800-53, OWASP ASVS Level 2, federal software supply chain security requirements, and the Trusted Internet Connections (TIC) Initiative </li> </ul> <ul> <li style="font-size: 14pt; font-family: 'trebuchet ms', geneva, sans-serif;" data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="11" data-aria-level="1">Maintain alignment with agency cloud well-architected principles, S3 standards, and zone-level ingestion rules across all deployed infrastructure </li> </ul> <ul> <li style="font-size: 14pt; font-family: 'trebuchet ms', geneva, sans-serif;" data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="12" data-aria-level="1">Provide pre-production support including deployments and data loads in lower environments; maintain the performance metrics dashboard with real-time data </li> </ul> <ul> <li style="font-size: 14pt; font-family: 'trebuchet ms', geneva, sans-serif;" data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="13" data-aria-level="1">Participate in 2-week sprint ceremonies, quarterly PI planning, and agile delivery using JIRA and GitHub </li> </ul>   Education and Experience:    Required    <ul> <li style="font-size: 14pt; font-family: 'trebuchet ms', geneva, sans-serif;" data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="14" data-aria-level="1">Bachelor's degree or higher in Computer Science, Information Systems, Cybersecurity, or a related field </li> </ul> <ul> <li style="font-size: 14pt; font-family: 'trebuchet ms', geneva, sans-serif;" data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="15" data-aria-level="1">4+ years of experience in DevSecOps, cloud engineering, or platform engineering on AWS </li> </ul> <ul> <li style="font-size: 14pt; font-family: 'trebuchet ms', geneva, sans-serif;" data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="16" data-aria-level="1">Hands-on experience with AWS CloudFormation, Infrastructure-as-Code deployments, and AWS Service Catalog in a FedRAMP-authorized environment </li> </ul> <ul> <li style="font-size: 14pt; font-family: 'trebuchet ms', geneva, sans-serif;" data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="17" data-aria-level="1">Direct experience with AWS services: Lambda, Glue, S3, CloudWatch, Secrets Manager, SNS, SQS, EventBridge, Step Functions, EC2, and EMR </li> </ul> <ul> <li style="font-size: 14pt; font-family: 'trebuchet ms', geneva, sans-serif;" data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="18" data-aria-level="1">Experience building and maintaining CI/CD pipelines using GitHub Actions or GitLab CI with branch-based deployment models </li> </ul> <ul> <li style="font-size: 14pt; font-family: 'trebuchet ms', geneva, sans-serif;" data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="19" data-aria-level="1">Demonstrated knowledge of Zero Trust Architecture and experience implementing ZTA on AWS per federal mandates </li> </ul> <ul> <li style="font-size: 14pt; font-family: 'trebuchet ms', geneva, sans-serif;" data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="20" data-aria-level="1">Experience with OWASP ZAP, SAST tools, dependency analysis, and container security scanning integrated into CI/CD pipelines </li> </ul> <ul> <li style="font-size: 14pt; font-family: 'trebuchet ms', geneva, sans-serif;" data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="21" data-aria-level="1">Experience with IAM role management, Secrets Manager credential patterns, and certificate management across multi-environment setups </li> </ul> <ul> <li style="font-size: 14pt; font-family: 'trebuchet ms', geneva, sans-serif;" data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="22" data-aria-level="1">Knowledge of FISMA, NIST 800-53, and the federal SDLC/ATO process; federal agency experience strongly preferred </li> </ul> <ul> <li style="font-size: 14pt; font-family: 'trebuchet ms', geneva, sans-serif;" data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="23" data-aria-level="1">Familiarity with Immutable Architecture principles and single-command deployment standards </li> </ul> <ul> <li style="font-size: 14pt; font-family: 'trebuchet ms', geneva, sans-serif;" data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="24" data-aria-level="1">Experience with agile sprint-based delivery, JIRA, GitHub, and CCB process management </li> </ul> <ul> <li style="font-size: 14pt; font-family: 'trebuchet ms', geneva, sans-serif;" data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="25" data-aria-level="1">Must be able to work 8am-5pm Eastern Time regardless of home location; availability for on-call rotation required </li> </ul> <ul> <li style="font-size: 14pt; font-family: 'trebuchet ms', geneva, sans-serif;" data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="26" data-aria-level="1">Active federal public trust suitability determination or ability to obtain one required </li> </ul><div class="content-conclusion"><div>STS is committed to equal employment opportunity and merit-based employment practices. STS provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination, harassment, and retaliation in all employment practices and decisions in accordance with applicable federal, state, and local laws.</div> <div> Employment decisions at STS are based on individual qualifications, performance, skills, and business needs, without regard to race, color, religion, sex, national origin, age, disability, protected veteran status, sexual orientation, gender identity, genetic information, marital status, or any other status protected by applicable law.</div> <div> This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, compensation, training, transfer, discipline, termination, layoff, recall, and leaves of absence.</div> <div>---</div> <div>Applicants may request removal from our applicant database, or specific information about how the data is used by contacting <a href="mailto:[email protected]">[email protected].</a></div></div>

About the Role

About the Role

Related Roles

About the Role

Related Roles