Raft is hiring a
DevSecOps Engineer in United States

Summary

The job is for a DevSecOps Engineer at Raft, a customer-focused small business specializing in Distributed Data Systems. The role involves developing and implementing end-to-end cluster and application lifecycles, collaborating with clients, building CI/CD pipelines, and applying GitOps principles. The position requires 2-4 years of experience with Kubernetes or Docker, strong scripting and automation skills, and knowledge of cloud infrastructure such as AWS, Azure, or Google Cloud.

Requirements

• 2-4 years of hands-on experience with Kubernetes or Docker, provisioning production clusters and maintaining their compliance
• Experience implementing automated validations of RMF controls (e.g., NIST 800-53) in container or VM images
• Experience building Gitlab CICD pipeline templates and jobs
• Strong scripting and automation skills (e.g., shell scripting, Python, or other scripting languages)
• Implement and improve development and security best practices by building necessary CICD pipeline jobs (Linting, SCA, SAST, Vulnerability scanning)
• Experience with cosign for signing and verifying container images and attestations
• Experience developing, troubleshooting, maintaining build automation for applications and images and developing end-to-end application testing
• Experience with hardening Linux virtual machines and containers
• Proven experience in software systems development via CI/CD pipelines (Gitlab Pipelines)
• Experience with cloud infrastructure such as AWS, Microsoft Azure, or Google Cloud
• Exposure in Agile, DevOps and DevSecOps methodologies, practices, and culture
• Strong knowledge of version control systems like Gitlab, ability to maintain/operate Gitlab in the Cloud or on-premises

Responsibilities

• Actively developing and implementing end-to-end cluster and application lifecycles
• Collaborating with clients, designing and implementing Kubernetes or Docker solutions
• Building CI/CD pipelines, ensuring a smooth software update process
• Participating in the application of GitOps principles for software delivery

Preferred Qualifications

• Experience with implementing Sigstore and Cosign to sign container images as well as SBOMs
• Experience with hardening application containers
• Proven experience with Istio service mesh
• Experience with programming languages such as Python, Go, Java, JavaScript, TypeScript, C#
• Passionate about automation, system efficiency, and security

Benefits

• Highly competitive salary
• Fully covered healthcare, dental, and vision coverage
• 401(k) and company match
• Take as you need PTO + 11 paid holidays
• Education & training benefits
• Annual budget for your tech/gadgets needs
• Monthly box of yummy snacks to eat while doing meaningful work
• Remote, hybrid, and flexible work options
• Team off-site in fun places!
• Generous Referral Bonuses
• And More!