DevSecOps Engineer

Sigma Defense is a leading technology company serving the Department of Defense (DoD), providing tactical communications systems and services for digital modernization since 2006. Through our acquisitions of SOLUTE in January 2022 and Sub U Systems in May 2022, we have expanded our software and communications hardware solutions to better support JADC2, C5ISR, SATCOM, and DEVSECOPS for customers in the Army, Navy, Air Force, Marine Corps, and Space Force. Through a combination of hardware, software, and industry expertise, we provide a complete portfolio of solutions and services that accelerates information collection and sharing for faster decision making and better mission outcomes.

Why would you work for us? Quite simply, the work we do is meaningful and stimulating. We promote initiative and independent thought; we encourage direct client engagement to ensure we are delivering what the customer wants; and our engineers and scientists are working on cutting-edge projects that move the state-of-the-art closer to the people who need them. If you're looking for technical challenges and an opportunity to take a leadership role in an environment that encourages you to excel, then WE are your destination.

We are a company of innovative professionals thriving in a highly motivating work environment that fosters creativity and independent thinking. If you are a motivated individual with a desire to support our service men and women, now is a great time to join Sigma Defense!

To learn more about our company, find and follow us at Sigma Defense Systems LLC: Overview | LinkedIn.

Naval Information Warfare Center, Pacific (NIWC Pacific) is looking for a self-directed and motivated individual to join our team as a DevSecOps Engineer in support of the MQ-25A Stingray unmanned aerial tanker program. Primary work location is at Naval Information Warfare Center Pacific in Point Loma, San Diego, CA with additional ability to perform some aspects of the position remotely. This position requires a DoD Secret clearance at minimum.

In this position you will provide engineering and software development support to Naval Information Warfare Center Pacific (NIWC Pacific) Code 551 fulfilling PMA-268 Unmanned Carrier Aviation (UCA) requirements, focusing on CI/CD infrastructure, maintenance, troubleshooting, and hardware support for the Advanced Networking Tactical System (ANTS) Operational Support System (OSS) network management software, which is hosted in the ANTS wideband network transport system onboard the MQ-25A aircraft. As an ANTS OSS DevSecOps Engineer, you’ll be part of a small team focused on developing and maintaining the infrastructure that aids software engineers in the execution of full life-cycle software development. One primary goal will be to apply your knowledge of DevSecOps to implement robust continuous integration and delivery (CI/CD) pipelines; integrated with automated testing, and vulnerability & quality scanning capabilities. By joining a cross-functional and collaborative team, you will be responsible for both modernizing current services and applications to deploying and integrating new technologies.

The MQ-25A Stingray is the Navy’s new unmanned drone with a primary mission of aerial refueling and a secondary capability to provide Intelligence, Surveillance, and Reconnaissance (ISR) all while being launched and recovered from an aircraft carrier.

Below lists the primary duties and responsibilities for this position, minimum required skills, and additional requested qualifications and experience.

Requirements

• Designs, develop, and improve the automation pipeline and integrated deployment processes to aid in software build and releases activities.
• Perform technical support for the OSS team and assists in satisfaction of the customer security directives and requirements ensuring that systems are safe and secure against cybersecurity threats.
• Utilize DevOps tools (such as Jenkins, Jira, Bitbucket) to ensure the code compiles and passes any built-in tests while ensuring repository integrity.
• Assist software teams with server upgrades/patches and setup of virtual environments.
• Work with system software testers to update manual and automated system test scripts as needed for each patch and collect system test metrics.
• Manages software dependencies including evaluation, acquisition & licensing, integration, and maintenance for software used by developers to deliver capabilities to the customer.
• Establish environments for deployment of code base integrity checks and automation of releases.
• Create security and maintenance patches for ANTS OSS application.
  • Retrieve Red Hat Enterprise Linux updates and tailor rpm packages for NMS application.
  • Retrieve and install vendor firmware updates for ANTS system hardware components.
  • Develop and execute regression test scripts to verify system functionality.
• Publish security and maintenance patches to ANTS Artifactory system binaries repository in accordance with ANTS configuration management and control processes.
• Diagnose and debug faults with Red Hat Enterprise Linux operating system and system hardware components.
• Build and maintain Assured Compliance Assessment Solution (ACAS)/Nessus servers for scanning ANTS OSS and laboratory infrastructure.
• Perform Assured Compliance Assessment Solution (ACAS) and Security Content Automation Protocol (SCAP) scans of the ANTS OSS and remediate findings.
• Perform analysis of Security Technical Implementation Guide (STIG) checklists for system software and remediate findings.
• Prepare and present reports on software patch status to OSS Lead/Product Owner, external stakeholders and sponsors during Sprint Reviews.

Minimum Qualifications and Experience:

• Experience with DevSecOps tools and techniques. (such as Jenkins, JIRA, Confluence, Bitbucket, etc.)
• Extensive Linux experience with servers and workstations.
  • Ability to easily navigate the Command Line Interface (CLI), knowledgeable with typical Linux troubleshooting tools, and have a broad understanding of Linux internals and debugging techniques.
• Proficiency with at least one scripting language, preferably Python, with the ability to automate processes.
• Experience in software development lab infrastructure design, layout, and implementation.
• Excellent communication skills with attention to documentation.
• CSWF Level II certifications:
  • CompTIA Security+ or equivalent
  • CompTIA Linux+ or equivalent (RHEL preferred)
  • Cisco CCNA or equivalent
• Candidate must possess of have the ability to obtain a DoD Secret security clearance (or greater). Sponsorship will be provided to the right candidate.

Candidate Differentiators:

• Familiarity with Naval Information Warfare Systems Command mission
• 5+ years DoD experience
• Familiarity with Agile Scrum development framework
• Experience with cloud technology (AWS, VMWare, Azure, Kubernetes)
• Experience designing, configuring, and operating enterprise-level cybersecurity architectures, and using tools such as:
  • Security Center/Nessus
  • Assured Compliance Assessment Solution (ACAS)
  • Security Content Automation Protocol (SCAP)
  • Security Technical Implementation Guide (STIG)
• A Bachelor’s Degree in Computer Science, Information Systems Management, Mathematics, Physical Science, Operations Research, Statistics, or Engineering from an accredited college or university

Salary Range: $120,000 - $160,000 annually.

Benefits

• Dental and Vision Insurance
• Medical Insurance to Include an HSA Plan and HRA Plan Which Features a $6,000 Health Reimbursement
• Life and A&D coverage
• Employee Assistance Program (EAP)
• 401(k) Plan with Company Matching Contributions
• 160 Hours of Paid Time Off (PTO) with Carry-Over up to 240 hours
• 12 (Floating) Holidays
• Educational Assistance
• Highly Competitive Salary

We are an equal opportunity employer. All applicants will be considered for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, marital status, veteran status or any other applicable legally protected status or characteristic.