DevSecOps Engineer

Information processing systems are the lifeblood of national security efforts, facilitating an understanding of the global situation, strategic planning, and tactical execution.  The reliability, accessibility, and sophistication of these systems can determine the outcomes of conflicts before they begin.  STR’s Systems Development Division (SDD) focuses on developing actionable, advanced technology solutions to provide asymmetric advantages within the information domain. SDD considers the entire lifecycle of the solution, from conceptualization and architecting, through development, to deployment, while leveraging novel technologies to deliver first-of-a-kind systems.  Current efforts include programs for airborne and space RF as well as advanced testing enabled by multi-function, multi-modal capabilities.

As a DevSecOps Engineer in SDD, you will work with the software team on implementation of Continuous Integration/ Continuous Deployment (CI/CD) pipelines for software integrating complex embedded RF systems, signal processing, and radar, with a primary focus on Air-to-Air applications. 

What you will do:

• Perform DevSecOps pipeline implementation including development, deployment, maintenance, optimization and operation of all phases of the DevSecOps process and tool chain
• Support DevSecOps pipelines in unclassified and classified environments using a variety of code quality tools
• Configure and maintain multiple development and DevOps environments at different classification levels, focusing on developer productivity, application performance, security monitoring, and alerting
• Collaborate with stakeholders to ensure team infrastructure toolsets are configured, maintained, and reliable, in compliance with program requirements and Department of Defense standards
• Coach team members on DevSecOps best practices while continuously helping to improve processes
• Identify areas for improvement and implement enhancements
• Document the pipeline architecture, tools and user processes to modify and update pipelines
• Evangelize DevOps and DevSecOps and support the software team on tooling, environments, debugging and testing.

Who You Are:

• This position requires the ability to obtain a Top Secret (TS) security clearance, for which U.S. citizenship is needed by U.S. Government
• BS in Computer Science, Information Technology, or related technical field
• Demonstrated experience working with DevSecOps pipelines, preferably on a DoD development effort
• Experience with cloud service providers such as AWS or Azure in an IL4/IL5/IL6 environment
• Proficiency with build, continuous integration, and continuous deployment tools such as Bazel, CMake, GCC, GitLab, GTest, GCov, clang-tidy,pylint and more
• Experience with containerization technologies such as docker, WSL, podman, and container orchestration tools like Kubernetes, Swarm, and Rancher
• Familiarity with security scanning tools such as SonarQube, Coverity, Syft, Grype, and Anchore and best practices for secure design, coding, and analysis
• Familiarity with IT configuration management tools like Ansible, or Chef
• Familiarity with monitoring and logging tools (e.g. Grafana, ELK Stack, or Splunk)
• General understanding of networking concepts and security protocols, and ability to configure and manage network security measures for development environments and tooling
• Strong scripting skills to write, maintain, and document automation and integrate tooling
• Knowledge of automation frameworks and tools to streamline repetitive tasks and manage complex workflows
• Familiarity with Atlassian Confluence and Jira, and MS Office 365

Even Better:

• Active Top Secret (TS) Security Clearance
• Advanced Degree in Computer Science, Information Technology, or related technical field
• Domain expertise in one or more of the following areas: Electronic Warfare, Antenna Apertures, Sensor Resource Management, Large-Scale Platform Test Systems, Cyber Physical Systems, Open System Architectures (UCI, OMS, COARPS)
• Demonstrated expertise in Java, Python, or C++
• Experience utilizing the following:
• Object-Oriented Programming principles
• Agile software lifecycle methodologies and tools
• Test-driven development methodologies

STR is a growing technology company with locations near Boston, MA, Arlington, VA, near Dayton, OH, Melbourne, FL, and Carlsbad, CA. We specialize in advanced research and development for defense, intelligence, and national security in: cyber; next generation sensors, radar, sonar, communications, and electronic warfare; and artificial intelligence algorithms and analytics to make sense of the complexity that is exploding around us.

STR is committed to creating a collaborative learning environment that supports deep technical understanding and recognizes the contributions and achievements of all team members. Our work is challenging, and we go home at night knowing that we pushed the envelope of technology and made the world safer.

STR is not just any company. Our people, culture, and attitude along with their unique set of skills, experiences, and perspectives put us on a trajectory to change the world. We can't do it alone, though - we need fellow trailblazers. If you are one, join our team and help to keep our society safe! Visit us at www.str.us for more info.

STR is an equal opportunity employer. We are fully dedicated to hiring the most qualified candidate regardless of race, color, religion, sex (including gender identity, sexual orientation and pregnancy), marital status, national origin, age, veteran status, disability, genetic information or any other characteristic protected by federal, state or local laws.

If you need a reasonable accommodation for any portion of the employment process, email us at appassist@str.us and provide your contact info.

Pursuant to applicable federal law and regulations, positions at STR require employees to obtain national security clearances and satisfy the requirements for compliance with export control and other applicable laws.