Note: The job is a remote job and is open to candidates in USA. CACI International Inc is a leading provider of technology solutions, and they are seeking a Cloud DevOps Engineer to join their fast-paced Agile development program. The role involves managing CI/CD pipelines, integrating security into development processes, and collaborating with various teams to ensure secure coding practices and vulnerability remediation.
Responsibilities
- Design, build, and maintain automated CI/CD pipelines using GitLab CI/CD
- Implement automated build, test, deployment, and rollback processes with quality gates and approval workflows
- Optimize pipeline performance and reliability
- Embed security scanning tools into CI/CD pipelines (SAST, DAST, SCA, container scanning)
- Implement and maintain security tools (SonarQube, Fortify, OWASP)
- Monitor and remediate vulnerabilities in code, dependencies, and infrastructure
- Build and secure container images following best practices
- Develop and maintain Kubernetes manifests, operators, and security policies (network policies, RBAC)
- Implement security monitoring, logging, and alerting solutions (Splunk, ELK Stack, Prometheus/Grafana)
- Develop automated incident response workflows and security/pipeline dashboards
- Partner with development teams on secure coding practices and vulnerability remediation
- Provide DevSecOps training and guidance on tools, practices, and security requirements
- Collaborate with Security, Operations, and Architecture teams on security initiatives
- Participate in security-focused code reviews
Skills
- 5 years of experience in related field
- Bachelor's Degree or equivalent experience
- Secret Clearance
- Security+ Certification
- 3-5 years in software development, DevOps, or security engineering
- 2+ years implementing and managing production CI/CD pipelines
- Understanding of SDLC and agile methodologies
- Proficiency in programming/scripting languages (Python, Go, Java, JavaScript, Bash)
- Experience with Git version control and branching strategies
- Hands-on experience with GitLab CI/CD
- Proficiency with Infrastructure as Code tools (Terraform, Ansible, CloudFormation)
- Experience with container technologies (Docker, Kubernetes, OpenShift)
- Familiarity with artifact repositories (Artifactory, Nexus, Docker Registry)
- Experience with application security testing tools (SAST, DAST, SCA, IAST)
- Knowledge of container/Kubernetes security best practices and frameworks (OWASP, NIST)
- Expert knowledge of AWS platforms and security services (EC2, CloudWatch, CloudTrail, S3, IAM, EKS, WAF & Shield, ECS)
- Understanding of cloud-native services, serverless architecture, and networking (VPC, subnets, firewalls, load balancers, service mesh)
- Knowledge of identity and access management (IAM, RBAC, SSO, SAML)
- Strong problem-solving and communication abilities
- Collaborative across development, security, and operations teams
- Self-motivated with ability to manage multiple priorities
- Security-first mindset with pragmatic risk management approach
- Security certifications (CISSP, CEH, GIAC, CSSLP)
- AWS Cloud certifications
- DevOps/Container certifications (CKA, CKAD, CKS, Docker Certified Associate)
Benefits
- Flexible time off benefit
- Robust learning resources
- Healthcare
- Wellness
- Financial
- Retirement
- Family support
- Continuing education
- Time off benefits
Company Overview