Founded in 1999 in the beautiful Smoky Mountains of East Tennessee, Cadre5 provides innovative technical solutions to our customers locally and nationally. Our Cadre5 Lab Partners division has partnered with the National Center for Computational Sciences (NCCS) at Oak Ridge National Laboratory (ORNL) to recruit a qualified DevSecOps Engineer.
ORNL delivers scientific discoveries and technical breakthroughs needed to realize solutions in energy and national security and provides economic benefit to the nation. This premier research institution located near Knoxville in Oak Ridge, TN, addresses national needs through impactful research and world-leading research centers.
**Please note: The first step in the interview process requires candidates to join a Microsoft Teams meeting with the video turned on.**
This is a full-time, permanent position that can telecommute. Occasional travel to the Oak Ridge facility may be required.
- Working with highly talented team members
- 3 weeks’ vacation
- Excellent medical insurance, including employer-paid benefits
The Team:
As a DevSecOps engineer, you will work within the L2 Infrastructure Services group of AmSC to support all activities on our multi-cloud central hub infrastructure, for dev, staging, pre-production, and production environments. There are other L2 science service teams that are deploying services on top of the infrastructure that our L2 manages – e.g. data catalogs and repositories, at-scale HPC compute services, user interface and API developers, and intelligent operations (AI/MLOps). Most of the resources working on AmSC only have a part-time allocation to the project. You will be one of the first full-time hires that is dedicated exclusively to AmSC. Your primary job responsibilities will be to support the science teams and infrastructure by building foundational security infrastructure and adding security tooling and features to the CI/CD pipelines that deploy services on that infrastructure.
About You:
You deploy infrastructure and/or security controls as code because automation lets you focus on the more difficult and rewarding problems. You love working with others because the 'best solutions' to a problem are a product of collaboration. You may have a GitHub account with cool projects. You may have more than a couple of our Preferred Qualifications and probably do not yet have any prior HPC experience. You enjoy AI tooling and development and may have a few running at home. You may have technical leadership experience and/or want to grow into this role. You may or may not think Hackers is an incredible movie.
- Translate complex technical concepts to better communicate with scientific, admin, and management staff.
- Help shape the AmSC security architectural vision.
- Lead teams to evaluate novel scientific and AI capabilities against our core security values.
- Develop and maintain security applications deployed with container orchestration tools.
- Automate policy assessments to verify cyber security and operational policy.
- Define and implement best practices and standards within the organization.
- Analyze, triage, and respond to application, system, and network events.
- Install, maintain, and monitor common security systems such as (N/H)IDS and SIEM.
- Interpret cyber security policy, recommend enhancements to current policies, and lead subsequent implementation efforts.
- Respond to system vulnerabilities and coordinate system patches and updates. Perform approved penetration testing and verification.
- Document cyber security procedures.
- Work with and Secure cloud infrastructure and container native applications.
- Follow, contribute to, and implement evolving AI safety and security standards.
- Collaborate with partners to understand and synthesize diverse security, operation, governance, and technical requirements.
- Participate in a 24-hour, 7-day on-call incident response rotation.
- Bachelor's Degree in Computer Science or related field.
- Equivalent combination of education and experience will be considered.
- Experience securing cloud infrastructure in one or more clouds (e.g. AWS)
- Experience with security tools as part of CI/CD pipelines (e.g. Trivy, SonarQube)
- Experience with container security tools (e.g. container capabilities, Gatekeeper, Neuvector)
- The ability to obtain and maintain a Department of Energy "Q" clearance is required. This requires US Citizenship.
- Master's Degree in Computer Science or related field and 1-2 years of relevant experience.
- Strong understanding of cyber security concepts, best practices, and tools.
- Experience deploying and maintaining systems in UNIX/Linux environments.
- Solid understanding of networked computing environment concepts.
- A DevSecOps mindset, including version control and scripting/programming experience.
- Ability to communicate effectively and work well in a team environment.
- Natural ability to understand and use new and emerging technologies.
- Experience with security tools such as NIDS/HIDS, Vulnerability Scanning, and SIEM.
- Experience in a high-performance computing environment.
- Experience with incident response and engaging in forensics.
- Experience with automated configuration management tools such as Puppet, Ansible, Terraform, etc.
- Experience in network, application, and/or security architecture and design.
- Familiarity with common protocols such as: DNS, DHCP, LDAP, SNMP, SMTP, HTTP, SSL, etc, and features of cloud networking (e.g. VPCs)
- Experience in cloud infrastructure and cloud security.
- Familiarity with major cloud providers, including platform native technologies.
- Familiarity with container workflows, development practices, and secure operations.
- Familiarity with AI development including evolving AI safety and security standards.
- Familiarity with software supply chain requirements including, provenance & attestations, and SBOMs.
Benefits
Cadre5 offers excellent pay and benefits, to include full medical, dental, and vision coverage coupled with 401K match, 15 days PTO, and 10 holidays.
Cadre5 is an equal opportunity employer. All qualified applicants, including individuals with disabilities and protected veterans, are encouraged to apply. Cadre5 is an E-Verify Employer.
