DevSecOps Specialist (REMOTE)

DevSecOps Specialist (REMOTE)

Responsibilities:

• Establish Microsoft Azure Pipelines that will facilitate the automated code versioning, testing and deployment of application code, as well as IaC templates, to target environments.
• Utilize Bicep to implement Infrastructure as Code (IaC) for automating the provisioning and configuration of Microsoft Azure resources.
• Providing guidance to developers in the areas of Static Analysis Security Testing (SAST) and Dynamic Analysis Security Testing (DAST).
• Coordinating with enterprise architects and technical leads of existing systems to gain alignment with the modernization roadmap.
• Implementing technical improvements to improve efficiency and repeatability of the SDLC process from development to production.
• Transforming the functional work experience between the development and operations teams by breaking down silos and unifying the delivery process.
• A successful candidate for this role is expected to possess the following skills and experience:
• Broad understanding of DevOps tools and technologies (source control, continuous integration, deployment automation and orchestration).
• In-depth knowledge of static code analysis security tools, dynamic testing tools and associated processes.
• Solid understanding of application security principles and security vulnerability mitigation techniques.
• Experience with infrastructure automation tools – including Infrastructure as Code (IaC) and cloud hosting technologies.
• In-depth experience with software development lifecycle methodologies.
• Experience delivering in an agile / iterative delivery environment.
• Ability to collaborate effectively with a wide range of personalities and work styles.
• Ability to break down complex tasks into actionable work items.
• Ability to work independently and communicate effectively.

Required Skills:

• Experience automating the delivery pipeline from development to production environments, including the use of continuous integration, in AZURE.
• Experience securing technology systems using Static Analysis Security Testing and Dynamic Analysis Security Testing toolsets.
• Experience deploying and monitoring web applications in Microsoft Azure and Amazon Web Services cloud environments.
• Experience with building IT solutions that adhere to multiple industry standards, compliance and regulatory requirements, and/or technology standards.
• Experience managing stakeholder expectations and priorities.
• Experience working within a project governance structure (methodology, required templates and reporting)
• Strong process and gap analysis skills
• Excellent task management skills, w/ the ability to multitask and manage multiple tasks with changing priorities in a cross-functional environment.
• Demonstrated experience with working with business and technical users to gather and document technical requirements.
• Demonstrate ability to prioritize and manage multiple projects and project activities simultaneously while meeting established deadlines.
• Hands-on CI/CD delivery as part of large system integration projects (over $50M)
• Working experience with Agile Projects
• Demonstrated experience with managing client expectations and implementing change management initiatives.