Senior DevOps Engineer

Important Notice for Applicants:

At Bixal, we want to ensure a transparent and secure application process for all candidates. Official communication will come from an email address ending in @bixal.com or from [email protected]. Messages from other sources may be fraudulent, and you should exercise care to avoid any links or attachments included. If you experience any challenges with your submission, please contact us at [email protected]. We're here to help!

Bixal will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. If you require any accommodation as part of our recruitment process, please contact us at [email protected]. You can expect a response from a team member within 24 hours during the regular work week and on the next operating day during the weekend or holidays.

About Us:Bixal is a consulting company based in Fairfax, VA, working alongside governments and organizations to help them deliver better services and experiences to the communities they serve. Using evidence-based knowledge and technology, Bixal empowers clients to deliver on their missions more effectively by fostering a culture of learning and continuous improvement.

LocationThis role can work remotely from anywhere in the USA. You must be legally authorized to work in the US. Bixal does not provide visa sponsorship. 

  What Will You Do?You will be a part of a team managing and maintaining a moderately complex Drupal application and development team. You will help ensure your team's success through modern agile and DevOps best practices. Your goal will to be ensure reliability and security while supporting developers and enabling them to code quickly via automation, continuous integration, and modern open-source tools. The application must adhere to FISMA and NIST guidelines and is subject to periodic review which you will assist with.

Important noteThis is a full-time proposal position contingent on contract award.

Responsibilities

• Create and help support developers build pipelines using common task runners like Gitlab, Bitbucket Pipelines, CircleCI, Travis CI, etc.
• Create and support container images for web applications.
• Automate container image scanning from various CVE and IAVA exploit lists.
• Implement production and testing infrastructure utilizing infrastructure as code.
• Troubleshoot and resolve complex issues related to cloud infrastructure and applications
• Ensure images follow best security practices and will pass various federal, PCI, and FEDRamp compliance (STIG and Authority to operate).
• Create appropriate container runtime systems to support our Team’s development of various federal datacenters (container orchestration).
• Support and improve legacy, VM based, pipelines and deployments.
• Operate in a fast-paced Agile environment.

Qualifications

• Bachelor's Degree, at least 5 years of relevant experience.
• Advanced experience in cloud computing, including working knowledge of at least one major cloud platform (e.g., AWS, Azure, or GCP)
• Experience collaborating with developers on dynamic web application stacks (e.g., LAMP, LEMP, MERN, MEAN, Django).
• Advanced experience with the Linux operating system (e.g., Debian, RHEL, Ubuntu, etc.)
• Advanced experience with containerization technologies (e.g., Docker, Kubernetes) and DevOps tools and methodologies (e.g., Git, Jenkins, CI/CD pipelines)
• Advanced experience with infrastructure as code (IaC) principles and tools (e.g., CloudFormation, Terraform)
• Advanced understanding of networking, security, and virtualization principles
• Experience using testing frameworks (e.g. Cypress) and testing web applications, APIs, and content management systems
• Experience with monitoring and logging tools such as DataDog.
• Experience with identity and access management tools like IAM, OAuth and zero-trust security models.
• Excellent communication and collaboration skills
• Proven track record of driving innovation and best practices in the field of cloud computing
• Ability to pass and maintain a Public Trust Security Clearance.

Nice to Have

• Experience with cloud security tools and services (e.g., AWS Security Hub, Azure Security Center, GCP Security Command Center)
• Experience with security frameworks (e.g., NIST SP 800-53, NIST SP 800-171, ISO 27001) and industry standards (e.g., CIS Benchmarks)
• Prior experience in Drupal CMS