Apply on Employer Site

ECCO Select · 5 hours ago

Senior DevSecOps Engineer #10977

Washington, DC

Contract

Onsite

Senior Level

ECCO Select is seeking a Senior IT DevSecOps Engineer to build GitLab-based DevSecOps automated pipelines into AWS GovCloud. The role involves supporting and accelerating application delivery on the CI/CD platform and managing GitLab CI/CD environments.

Information ServicesInformation Technology

No H1B

U.S. Citizen Only

Responsibilities

Build GitLab‑based DevSecOps automated pipelines into AWS GovCloud

Support and accelerate application delivery on the CI/CD platform

Manage and operate GitLab CI/CD environments

Qualification

GitLab CI/CDAWSDockerKubernetesTerraformGitScripting languagesStatic Application Security TestingDynamic Application Security TestingInteractive Application Security TestingSoftware Composition AnalysisContainer security best practicesVersion Control SystemsBasic to intermediate programmingLinux-based shellAutomated security checksPaired programming

Required

US Citizenship Required due to project scope

Version Control Systems

Proficiency with Git

Advanced knowledge of GitLab, including CI/CD pipelines, merge requests, and issue tracking

Familiarity with branching, promotion, and release strategies (such as SemRel)

Familiarity using internalized registries and repositories (Nexus dependency management, internal container registries, etc.)

GitLab CI/CD

GitLab runners (configuration and management)

GitLab components (or generally developing and utilizing templates for CI/CD jobs in any platform, such as GitHub Actions)

Demonstrated proficiency with AWS (Lambda, EC2, S3, EBS/EFS, ECS, EKS, SNS, CloudWatch)

Docker (building, deploying, and managing containers)

Kubernetes (orchestration, deployment strategies, security, troubleshooting)

Container security best practices

Container hardening strategies, such as maintaining a secure 'golden' image

Deploying and managing container-based runners hosted on EKS

GitOps tools and deployment principles (such as ArgoCD/Flux)

Static Application Security Testing (SAST)

Dynamic Application Security Testing (DAST)

Interactive Application Security Testing (IAST)

Software Composition Analysis (SCA)

Container scanning tooling (Trivy, Prisma/Twistlock, Neuvector, etc.)

Terraform (writing, managing, and optimizing Terraform configurations)

Other IaC tools (e.g., CloudFormation, Ansible)

Proficiency in scripting languages (e.g., Python, Bash)

Basic to intermediate programming skills

Experience working with a Linux-based shell and navigating Linux systems

Ability to work well in a paired programming environment at times

Creating and maintaining automated security checks and remediations

Integrating security into automated deployment processes

Incorporating linting tooling into development processes

Incorporating unit & performance testing into deployment processes

Preferred

GitLab certification desired but not required

AWS certification desired but not required

Company

ECCO Select

ECCO Select is an information technology and services company.

Founded in 1995

North Kansas City, Missouri, USA

201-500 employees

https://www.eccoselect.com/

Funding

Current Stage

Growth Stage

Leadership Team

Jeanette Hernandez Prenger

Founder and CEO

Company data provided by crunchbase