Requirements:

• 15 years of software development experience, including full Software Development Lifecycle, full stack applications, service-oriented architectures (micro-services), continuous integration and continuous delivery. Experience must also include containerized applications and cloud platforms.
• Experience developing React and Angular web applications.
• Solid experience writing unit, integration, and end to end tests.
• Comprehensive experience implementing and integrating a variety of DevSecOps tools and technologies including Git, GitHub, GitHub Actions, Jenkins, AWS CodeBuild, Jira, Terraform, SonarQube, Prisma Cloud or similar and related technologies.
• Must be able to work well remotely, but in an agile development environment with frequent collaboration and dynamic requirements.
• BA or BS degree in Science, Technology, Engineering, or Mathematics.

Preferred Qualifications:

• Experience with Ruby on Rails.
• Experience developing APIs that will be shared and used by other applications/teams and documenting those APIs according to the Open API spec.
• Experience with setting up Selenium, Cypress, or Playwright and developing e2e test suites.
• Experience with "Infrastructure as Code" tools and techniques, with hands on experience setting up and tearing down environments in support of the CI/CD pipeline.
• Worked with various AWS platforms, including IAM, EKS, RDS, S3, and EC2.
• Proven experience managing system changes without interruption to the user.
• Knowledge of Zero Trust strategies and implementation of tools and techniques to achieve Zero Trust goals .
• Good verbal and written communication skills.
• Experience with security automation and machine learning.
• Experience using a wide variety of open source and COTS technologies and tools.

Job Responsibilities:

Candidate will need to be comfortable doing highly technical work managing all aspects of DevSecOps as well as software development. We develop enterprise grade, production ready tools with thousands of users that we've either developed from scratch or have inherited and are actively improving upon and sharing with the enterprise. We also manage our own set of CI/CD pipelines that we are continuously improving to increase security, quality, and efficiency. Our tools and processes are shared across the enterprise as examples and thus need to be at very high standards. The position requires a candidate that can be productive while working independently; able to communicate effectively with the rest of the team, plan and prioritize work, research various topics and present relevant findings, and contribute high quality production ready code.Some of the job responsibilities include:

• Application development using technologies like Next.js and React, Angular, Java Spring, and Ruby on Rails.
• Setting up, maintaining, and improving CI/CD pipelines for the various tools the team develops using Jenkins, Groovy, Docker, and various plugins and security scanning tools.
• Deploying containerized applications to AWS EKS while providing monitoring and alerting via New Relic, Splunk, and other tools.
• Developing, hardening, and sharing Docker images for use throughout the enterprise.
• Researching and implementing Zero Trust architectures and strategies for our team and the enterprise.
• Continuously improving our technologies and processes across our team and the enterprise within the unique constraints our customers require.
• Understanding and improving security practices throughout the SDLC, including key management, security scanning, immutable workloads, code quality, etc.
• Leading, communicating , and collaborating across functional borders.
• Effectively present analysis, findings, and strategies to teammates and customers.
• Expressing technical information clearly at different organizational levels.

Job Types: Full-time, Contract

Pay: $90.00 - $95.00 per hour

Schedule:

• 8 hour shift
• Monday to Friday

Application Question(s):

• Are you a US citizen?
• Do you have experience with security tools like Twistlock, SonarQube and Nexus IQ (or others)? If yes, please list all security tools that you're aware of.
• Do you have experience building CI/CD pipelines using Jenkins, GitHub Actions, or Harness? If yes, please provide specific details about your experience, including any challenges you've faced and how you addressed them. If you've used Harness, in particular, please describe the types of pipelines you built and any advanced features or integrations you leveraged.
• In our environment, we often work with multiple programming languages depending on the project requirements. Can you describe your experience working with different programming languages, and how comfortable are you with switching between them? Could you also provide examples of situations where you've had to use more than one language in a project?

Education:

• Bachelor's (Preferred)

Experience:

• Ruby on Rails: 6 years (Preferred)
• Kubernetes: 8 years (Required)
• React: 10 years (Required)
• Jenkins: 8 years (Required)
• Java: 10 years (Required)
• PostgreSQL: 8 years (Required)

Work Location: Remote