高级DevSecOps工程师
Senior DevSecOps Engineer
在充满可能的世界中，追求一个拥有无限机遇的事业。想象未来！
在Parsons，你可以拥有一段让你茁壮成长、与优秀的人共事并做真实的自己的职业生涯。在我们以重视人才、拥抱敏捷和促进成长为领导愿景的指引下，我们培养出一种创新文化，使你能够充分发挥潜能。释放你的才华，重新定义可能性。
**职位描述：**
在Parsons，作为高级DevSecOps工程师，你将为支持DCDC任务的软件和基础设施的设计、开发、集成、部署和维护提供实际的技术领导。你将负责推动安全自动化，改进开发人员和操作员的工作流程，并在整个软件生命周期中建立可靠且可重复的交付实践。
**你将负责以下工作：**
- 与DCDC客户和跨职能团队合作，收集需求，定义技术解决方案，并交付安全的软件和数据流功能。
- 作为DevSecOps、云基础设施、CI/CD、容器、基础设施即代码和软件供应链安全方面的高级技术顾问。
- 将需求转化为开发、测试、预发布和生产环境中的软件、系统、基础设施和部署设计。
- 使用Java、Rust、Go、YAML、Python或类似编程语言设计、开发、测试、部署和维护生产应用程序和服务。
- 设计和管理CI/CD流水线，自动化构建、测试、安全验证、工件管理、部署、审批、回滚和发布流程。
- 使用Terraform、Ansible、CloudFormation和类似的基础设施即代码工具来配置和管理云基础设施。
- 使用Docker、Kubernetes、OpenShift、RKE2或类似技术设计和运营安全、可扩展且高可用的容器化平台。
- 为AWS应用程序、基础设施和分布式系统实施监控、日志记录、警报、可观测性和故障排查流程。
- 集成DevSecOps和软件供应链安全控制措施，包括漏洞扫描、密钥检测、容器安全、SBOM、工件来源和镜像签名。
- 主持技术评审和客户讨论；指导工程师；协调工程团队；并制定架构、运维、灾难恢复和知识转移文档。
查看英文原文
In a world of possibilities, pursue one with endless opportunities. Imagine Next!
At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what’s possible.
**Job Description:**
As a SeniorDevSecOpsEngineer at Parsons, you will provide hands-on technical leadership in the design, development, integration, deployment, and sustainment of software and infrastructure supporting DCDC missions. You will be responsible for driving secure automation, improving developer and operator workflows, and establishing reliable and repeatable delivery practices across the software lifecycle.
**What You'll Be Doing:**
- Collaborate with DCDC customers and cross-functional teams to gather requirements, define technical solutions, and deliver secure software and data-streaming capabilities.
- Serve as a senior technical advisor forDevSecOps, cloud infrastructure, CI/CD, containers, Infrastructure as Code, and software-supply-chain security.
- Translate requirements into software, system, infrastructure, and deployment designs across development, test, staging, and production environments.
- Design, develop, test, deploy, and maintain production applications and services using Java, Rust, Go, YAML, Python,or comparable programming languages.
- Design and manage CI/CD pipelines that automate builds, testing, security validation, artifact management, deployment, approvals, rollback, and release processes.
- Provision and manage cloud infrastructure using Terraform, Ansible, CloudFormation, and comparable Infrastructure as Code tools.
- Design and operate secure, scalable, and highly available containerized platforms using Docker, Kubernetes, OpenShift, RKE2, or comparable technologies.
- Implement monitoring, logging, alerting, observability, and troubleshooting processes for AWS applications, infrastructure, and distributed systems.
- IntegrateDevSecOpsand software-supply-chain security controls, including vulnerability scanning, secrets detection, container security, SBOMs, artifact provenance, and image signing.
- Lead technical reviews and customer discussions; mentor engineers; coordinate engineering teams; and develop architecture, operational, disaster-recovery, and knowledge-transfer documentation.
**Required Qualifications:**
- B.S. in Computer Science, Software Engineering, Information Technology, or a related field, or equivalent experience, with 8+ years of experience in DevOps,DevSecOps, software engineering, cloud engineering, platform engineering, SRE, or a related discipline.
- 5+ years of production CI/CD experience, including pipeline design, automated testing, security validation, artifact management, deployment, release management, and operational support.
- Experience developing production software and automation using Java, Python, Go, Bash, Ansible, Terraform, or comparable technologies.
- Demonstrated technicalcapabilityin software delivery, infrastructure automation, platform engineering, or related initiatives.
- Hands-on experience with Terraform, Ansible, Git, GitLab, Artifactory, Nexus, and comparable tools.
- Experience withDevSecOpsand software-supply-chain security, including SAST, software composition analysis, container scanning, secrets detection, vulnerability management, SBOMs, artifact validation, and secure build and release processes.
- Proficiency in Linux/Unix administration and AWS cloud services, including compute, storage, networking, IAM, security, automation, logging, monitoring, and operations.
- Experience deploying and operating containerized applications and highly available distributed systems using Docker, Kubernetes, or comparable platforms.
- Experience with observability and troubleshooting using tools such as Prometheus, Grafana, Datadog, CloudWatch, or comparable technologies.
- Strong communication and problem-solving skills, with the ability to lead technical discussions, advise customer and program leadership, mentor engineers, and work effectively across multidisciplinary teams.
- Active Secret clearance is required.
**Desired Qualifications:**
- Master’s degree in a related technical field.
- Experience with Rancher, RKE2, vSphere, Kubernetes, hybrid-cloud, virtualization, AWS GovCloud, DoD Impact Level 5 or 6, or other regulated environments.
- Knowledge of DoD CIO Kubernetes reference architectures, STIGs, Platform One, Iron Bank, container hardening, and secure Kubernetes operations.
- Experience designing and operating Kubernetes platforms in restricted, disconnected, air-gapped, or limited-connectivity environments.
- Experience withGitOps, Helm, Operators, admission controls, policy enforcement, cluster lifecycle management, SRE, platform-as-a-product, SLIs, SLOs, and reliability engineering.
- Familiarity with Agile methodologies, including Scrum and Kanban.
- Experience with Zero Trust, SBOMs, artifact signing, image provenance, dependency governance, secrets management, least privilege, network segmentation, and workload security.
- Experience applying NIST, RMF, FedRAMP, DoD cybersecurity controls, STIGs, Authority to Operate processes, or comparable frameworks.
- Experience leading technical teams and serving as a technical lead, systems architect, platform owner, release lead, or engineering lead across the full software lifecycle.
- Experience with high availability, disaster recovery, business continuity, performance engineering, reference architectures, technical standards, reusable automation, roadmaps, and modernization.
- Relevant AWS, Kubernetes, Terraform, cybersecurity, DevOps, or DoD 8570/8140 certifications.
**Security Clearance Requirement:**
An active Secret security clearance is required for this position.
This position is part of our Federal Solutions team.
The Federal Solutions segment delivers resources to our US government customers that ensure the success of missions around the globe. Our intelligent employees drive the state of the art as they provide services and solutions in the areas of defense, security, intelligence, infrastructure, and environmental. We promote a culture of excellence and close-knit teams that take pride in delivering, protecting, and sustaining our nation's most critical assets, from Earth to cyberspace. Throughout the company, our people are anticipating what’s next to deliver the solutions our customers need now.
Salary Range: $125,100.00 - $225,200.00
We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as medical, dental, vision, paid time off, 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle!
Parsons is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status.
We truly invest and care about our employee’s wellbeing and provide endless growth opportunities as the sky is the limit, so aim for the stars! Imagine next and join the Parsons quest—APPLY TODAY!
Parsons is aware of fraudulent recruitment practices. To learn more about recruitment fraud and how to report it, please refer to[https://www.parsons.com/fraudulent-recruitment/](https://www.parsons.com/fraudulent-recruitment/).