DevOps Engineer

Since our inception in 2017, Graphite GTC has been on a mission to redefine the landscape of software development. Our groundbreaking No-Code development platform has transformed the way software is conceived and created, democratizing the process and making it accessible to all. Our mantra, “Better. Faster. Cheaper.™” is not just a slogan; it's the reality we deliver through our innovative platform.

At Graphite GTC, we are not just a technology company; we are a beacon of innovation in the no-code application development sphere. Our vision is to provide equal access to cutting-edge technology for a diverse range of clients, from sprightly startups to established enterprises. We achieve this vision by moving away from traditional hand-coding methods and embracing a visually driven approach to application design, enabling anyone to craft sustainable, enterprise-class applications. Our proprietary software stands as a testament to our innovative spirit and technical prowess. This intellectual property has not only set us apart in the market but has also been the cornerstone of our service offerings. We have evolved into a full-service IT and consulting powerhouse, catering to an impressive roster of clients including the U.S. government, leading pharmaceutical companies, educational institutions, and giants in the construction and sustainability sectors.

Our team is a melting pot of experienced professionals and vibrant technologists, all united by a shared passion for innovation. We foster a culture where humor meets humility, creativity intersects with collaboration, and where problem-solving happens at the speed of thought in our open, dynamic office environment. Graphite GTC stands today as a leader, not just in no-code application development, but as a full-fledged IT and consulting partner, trusted by some of the most prestigious organizations across various sectors.

We are actively seeking a highly skilled DevOps Engineer with specialized expertise in cybersecurity to enhance our technology infrastructure and software development processes. This role is critical to our operations, requiring a seasoned professional who excels in both development and operational security. The ideal candidate will work closely with our software development, IT operations, and cybersecurity teams to architect, deploy, and secure our automated environments using advanced DevSecOps practices.

In this capacity, the DevOps Engineer will be instrumental in weaving security seamlessly into every stage of our software development and deployment lifecycle. Your responsibilities will include the development of secure automation frameworks, the oversight of robust CI/CD pipelines, and the implementation of security controls and compliance measures tailored to our operational needs. Additionally, you will be expected to have a strong understanding and background in adhering to NIST guidelines and SOC2 compliance requirements, integrating these standards into our security protocols to ensure compliance and enhance data protection.

Responsibilities

• Architect and deploy highly secure, scalable automation solutions across both cloud-based and on-premise environments, optimizing for cost and reliability.
• Lead the integration of advanced security measures during the initial phases of system design, utilizing state-of-the-art encryption methodologies and secure architecture frameworks.
• Design and refine CI/CD pipelines to include rigorous security checks and balances using industry-leading tools like GitLab CI, Jenkins, and CircleCI.Develop custom scripts or leverage existing tools to automate security tasks such as code scanning, vulnerability assessments, and compliance tracking within the CI/CD pipeline.
• Conduct in-depth security assessments, including threat modeling and risk analysis, to proactively identify potential security issues before they affect the environment.
• Develop and enforce comprehensive cybersecurity policies and procedures, including Identity and Access Management (IAM) strategies, to ensure stringent data protection and privacy.
• Implement sophisticated monitoring solutions that track both performance and security metrics, utilizing tools like Prometheus, Grafana, or ELK stack to provide real-time alerts on anomalies.
• Lead and manage a coordinated incident response mechanism that includes automated responses and detailed incident reporting to minimize downtime and ensure rapid recovery.
• Serve as the key liaison between software development, operations, and cybersecurity teams, fostering a culture of security-first thinking across all phases of development and deployment.
• Conduct expert-level training sessions and workshops to raise awareness and proficiency in secure coding practices, latest security trends, and DevSecOps methodologies.

Qualifications:Must be U.S. Citizen. Master’s degree in Computer Science, Engineering, Information Technology, or a related field preferred, or equivalent practical experience. Over 5 years of hands-on experience in a senior DevOps role, with specific expertise in cybersecurity and DevSecOps practices. In-depth knowledge of scripting and programming languages such as Python, Bash, Ruby, or Perl. Extensive experience with automation and configuration management using Ansible, Terraform, Chef, or Puppet. Expert certification in cybersecurity (CISSP, CISM) and/or DevOps-specific credentials (AWS Certified DevOps Engineer Professional, Microsoft Certified: Azure DevOps Engineer Expert). Exceptional problem-solving skills, the ability to perform under pressure, and the capability to mentor team members in best practices in DevOps and cybersecurity.