Apex Systems Hiring for DevSecOps Lead at Las Vegas, NV Full Time

Position Overview: 

The primary responsibility of the DevSecOps Lead is to oversee the technology security, administration, configuration, troubleshooting and automation of cyber security analysis of solutions within AWS.

In this role, the Lead will be responsible for managing the team of DevSecOps Engineers responsible for overall security posture of our cloud applications and AWS cloud infrastructure. The Lead will work closely with the Corp IT and Corp Cyber Security leadership in coordinating the AWS security initiatives and auditing activities across all team activities.  A key part of the position is supporting compliance efforts related to secure SDLC processes and cloud infrastructure

• Provides technical expertise in securing systems, technical infrastructure, tools, modeling, external interfaces, and other technical areas.
• Completes complex development, design, implementation, architecture design specification, and maintenance activities as needed.
• Works closely with the Cyber Security and DevOps teams to integrate artifacts into the CI/CD Pipelines.
• Maintains a good understanding on the latest secure development practices and tools that help increase awareness around secure code practices and turn around when vulnerabilities are found.
• Ensures the viability and security of product deliverables.
• Identifies potential solutions, including the cost/benefit of each option. Approves technical solutions proposed by team members. Elevates complex technical issues to other technology or cyber security experts, including architects and vendors. Resolves any technical problems discovered by DevOps, development, or testers and any internal clients.
• Communicates with product teams on a frequent basis. Identifies tasks and issues that may have an impact on service levels or schedules.
• Provides realistic task and cost estimates from the team
• Screens resumes of team members, interviews, makes hiring and assignment recommendations, and conducts performance reviews.
• Maintains a current and working knowledge of IT development methodology, architecture design, and technical standards.
• As new standards and policies are instituted, ensures their usage by team members.
• Reviews and approves documentation and diagrams created by IT team members (e.g., system specifications). Writes documentation, including technical standards and processes.
• Identifies opportunities for continuous quality improvement of technical standards, methodologies, and technologies.
• Participates in design, code, and test inspections throughout product life cycle to identify issues. Participates as a technical consultant at other project meetings. Presents technical status and issues at milestone reviews.
• Thoroughly understands and complies with IT and Cyber Security policies and procedures, especially those for quality and productivity standards that enable the team to meet established objectives.
• Thoroughly understands and complies with Information Security policies and procedures, and verifies deliverables meet Information Security requirements.
• Provide expertise and best practices for implementing cloud security (internal) and product security (external)
• Assess architectures and designs for security vulnerabilities and suggest and implement proper alternatives
• Oversee the management and remediation of identified security flaws within our development platforms
• Build and maintain monitoring, auditing, and reporting frameworks that produces artifacts that support security and compliance needs
• Provide packaging/deployment capability to deliver products to point of need, including multiple cloud-based solutions
• Support multiple agile teams across various platforms, environments, and instances
• Incorporate best practices to increase the quality & velocity of deployments
• Implement security best practices and configuration management
• Provide technical leadership and direction in the DevSecOps domain
• Perform technology watch related to industry trends, best practices, and competition.
• Provide individual engineers with technical leadership and help group members develop new skills.
• Ensure configuration and compliance with configuration management tools.
• Strong organizational skills, customer service focus, attention to detail, and process orientation.
• Ability to distill and present information to senior leaders.
• Participates in special projects and performs other duties as assigned

Minimum Qualifications

• 21 years of age.
• Proof of authorization/eligibility to work in the United States.
• Bachelor’s degree or equivalent in relevant discipline, and/or AWS Solution Architect
• 5+ years leading DevSecOps teams.
• 5+ hands-on technical experience securing and monitoring AWS cloud infrastructure, and in-house developed applications
• Experience in cloud based containerized environment (Kubernetes, Docker)
• 2 or more of the following skill areas or technologies
  • 3rd party library security scanning (Whitesource or equivalent)
  • Static Code Scanning (Kiuwan or equivalent)
  • Dynamic Code Scanning
  • Code Hygiene scanning (SonarCloud, SonarQube or equivalent)
• 2 or more of the following skill areas or technologies
  • Prisma Cloud
  • Twistlock
  • Sonartype
  • Anchore
  • Datadog
• 2 or more of the following skill areas or technologies
  • Kubernetes
  • Docker
  • Container Security
  • AWS EKS
  • Helm
• Knowledge of IAM, cloud trail, guard duty, WAF, SDLC practices, basic scripting skills
• Experience with common programming and scripting languages, such as Golang, Ruby, C/C++, C#, Python, JavaScript, Bash
• Previous startup experience would be a huge plus
• Latent desire and/or curiosity in related domain like software development, front-end engineering, security or project management

EEO Employer

Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation in using our website for a search or application, please contact our Employee Services Department at

mailTo:[email protected]

or 844-463-6178.