DevOps Engineer

Your Role as a DevOps Engineer

As a seasoned DevOps Engineer at CANDA Solutions, LLC, you’ll play a hands-on role in building and maintaining secure, scalable infrastructure in AWS—primarily within the AWS GovCloud environment. Your day-to-day work will involve writing and managing Infrastructure as Code (IaC) using Terraform, as well as deploying and supporting essential cloud services such as EC2, RDS, EKS, VPC, Route 53, S3, and KMS.

You’ll be deeply involved with Kubernetes (EKS) to orchestrate containerized applications and utilize Helm for streamlined deployments. Your technical proficiency will extend to Linux system administration, containerization with Docker, and managing YAML configurations. Additionally, you’ll implement and maintain Single Sign-On (SSO) using tools like Okta, drawing on your knowledge of SAML and OIDC protocols.

Another key responsibility will be configuring CI/CD pipelines and maintaining Git repositories in GitLab, ensuring secure and efficient code delivery with strong version control and governance practices.

---

What You’ll Need to Succeed

To thrive in this position, you’ll need a versatile technical background, excellent problem-solving abilities, and strong communication skills. A Top Secret Security Clearance is mandatory, along with either a Bachelor’s degree in Computer Science, Engineering, or a related discipline—or 3–5 years of relevant industry experience. A minimum of three years in a DevOps engineering role is required.

You should have deep experience with cloud platforms like AWS and Microsoft Azure, as well as expertise in Terraform and other IaC tools. Your scripting skills in languages such as Python, Ruby, Bash, and PowerShell will be vital to automating and optimizing workflows.

---

Key Qualifications and Skills

Clearance & Education

• Top Secret Security Clearance required

• Bachelor’s degree in Computer Science, Engineering, or related field (or equivalent professional experience)

• Minimum 3 years of experience in a DevOps role

Cloud Platforms

• AWS: EC2, RDS (SQL Server, PostgreSQL), VPC, S3, Route 53, IAM & Identity Center, EKS, Certificate Manager, ELB, CloudWatch, AWS Organizations

• Azure: Equivalent services, including Azure Resource Manager (ARM), Microsoft Entra ID

Infrastructure as Code (IaC)

• Terraform (preferred)

• AWS CloudFormation

• Azure Resource Manager (ARM)

Containerization & Orchestration

• Docker

• Kubernetes (EKS)

• Helm deployments

Scripting & Programming

• Python, Ruby

• PowerShell

• Bash, shell scripting

Source Control & CI/CD

• Git, GitLab (preferred)

• CI/CD pipeline setup and management

Security & Identity Management

• SSO: Okta, Microsoft Entra ID

• Active Directory: Identity and Domain Admin

• Firewalls: VM-Series (Palo Alto preferred)

• VPN: Client and Site-to-Site (AWS-Azure, Palo Alto)

• Certificate lifecycle management

• Vulnerability scanning and remediation

• TLS encryption standards and best practices

Monitoring & Logging

• Datadog

• AWS CloudWatch

Databases

• SQL Server

• PostgreSQL

• MongoDB

Messaging

• RabbitMQ (self-hosted and Amazon MQ)

System Administration

• Linux server administration

• Windows Server/Workstation setup and maintenance

Tools & Documentation

• Ticketing: GitLab Issues, Monday.com

• Security documentation: SSPs, SOC2, User Guides

---

Preferred Certifications

• CISSP

• AWS Certified DevOps Engineer – Professional

• Microsoft Azure Certifications

• CSSLP (Certified Secure Software Lifecycle Professional)

APPLY