DevSecOps Engineer

Job Description

Position Overview

We areseeking an experienced DevOps Engineer to support the DataSphere platform, acomprehensive data lakehouse solution built on AWS Government Commercial Cloud(GCC) environment. The successful candidate will be responsible forimplementing robust CI/CD pipelines using government-approved tools, andensuring compliance with stringent security and governance requirements.

Key Responsibilities:

CI/CDPipeline Management:

Developand maintain CI/CD pipelines using SHIP-HATS tools ecosystem

ConfigureGitLab for version control and automated deployment workflows

Implementcode quality gates using SonarQube for static code analysis

Managesecurity scanning using Fortify on Demand (FOD) for vulnerability assessment

Overseedependency scanning and management using Nexus IQ

Coordinatewith CloudSCAPE for security compliance scanning and remediation

Security and Compliance:

Implement and maintain Automated Baseline Log Review (ABLR)systems

Coordinate with GovTech Cyber Security Operations Centre(GCSOC) for security monitoring

Manage Central Accounts Management (CAM) integration foruser access control

Coordinate and resolve Vulnerability Assessment andPenetration Testing (VAPT) findings.

Ensure compliance with Personal Data Protection ImpactAssessment (PDPIA) requirements

Implement and maintain Vulnerability Management System (VMS)

Platform Operations:

Monitor system performance and implement optimizationstrategies

Manage secrets and encryption key rotation for dataprotection

Configure email notifications for data processing status anderror alerts

Implement and maintain data retention policies

Support SaaS whitelisting processes and approvals

Coordinate System Security Acceptance Testing (SSAT)activities

Collaboration and Support:

Work closely with Data Engineers, Data Analysts and securitytechnical team.

Support multiple datamarts

Provide technical guidance for Raw-to-Tech andTech-to-Business data pipelines

Collaborate with various government divisions andstakeholders

Support training environment setup for user onboarding andskill development

Required Qualifications

Technical Skills:

Strong expertise in AWS services, particularly in GCCenvironment

Proficiency in Infrastructure-as-Code tools, preferablyTerraform

Experience with GitLab CI/CD pipeline development andmanagement

Knowledge of security scanning tools (SonarQube, Fortify,Nexus IQ)

Understanding of government security frameworks andcompliance requirements

Experience with containerization and orchestrationtechnologies

Strong scripting skills in Python, Bash, or PowerShell

Security and Compliance:

Experience with government security clearance processes

Knowledge of data classification and handling procedures(Sensitive High)

Understanding of encryption mechanisms and key management

Familiarity with vulnerability management and remediationprocesses

Experience with security monitoring and incident responseprocedures

Certifications (Preferred):

AWSCertified DevOps Engineer

Required Experience

Minimum3 years of DevOps engineering experience

Experience working in government environments, esp in GCC.

Experience in agile development methodologies

Personal Attributes

Good communication and collaboration abilities

Attention to detail and commitment to security bestpractices

Strong documentation and knowledge sharing practices

Proactive approach to system monitoring and maintenance