GMD DevSecOps Engineer

Job description

General Overview APEX TK is looking for an experienced, team-oriented GMD DevSecOps Engineer to join our team! In this role, you will provide critical support to GM's Digital Acquisition & Infrastructure team and primarily be responsible for architecting, building, and scaling the DevSecOps Environment within the Integrated Digital Data Environment (IDDE). What You'll Be Doing: Architect and provision the IDDE DevSecOps environment using Terraform to ensure scalable, repeatable, and version-controlled infrastructure deployments. Deploy, manage, and scale containerized applications and microservices using Kubernetes, ensuring high availability and resilience for mission-critical workloads. Design, implement, and maintain advanced continuous integration and continuous deployment (CI/CD pipelines) to fully automate software building, testing, and deployment processes. Act as a system administrator within the IDDE across hybrid cloud environments (AWS and Azure). Manage tool deployment, infrastructure configuration, Windows Active Directory, and user account management. Collaborate with cyber engineers to execute STIG evaluation, analysis, and implementation. Embed automated security and code scanning tools directly into the CI/CD pipelines to ensure high software security standards. Support deliverable and release objectives, create comprehensive product/infrastructure documentation, and manage complex deployment orchestration. What Required Skills You'll Bring: Master’s Degree + 12 years relevant experience, or Bachelor's + 20 years exp is required. Active security clearance (SECRET or above) is required. Hands-on experience using Terraform for complex Infrastructure as Code (IaC) deployments. Proficieny in building, deploying, and managing containerized environments using Kubernetes. Demonstrated experience designing and maintaining automated CI/CD pipelines (e.g., GitLab CI, Jenkins, Azure DevOps). Hands-on operational experience working within enterprise cloud environments, specifically Microsoft Azure and AWS. Proven experience in Windows Server administration, Windows Active Directory, Group Policy Objects (GPOs), and System Center Configuration Manager (SCCM). Demonstrated experience in STIG analysis, deployment orchestration, and security/code scanning tools. Prior experience with Integrated Development Environments, such as Coder. CompTIA Security+ certification (Required for baseline DoD compliance). Excellent communication, collaboration, and leadership skills are required. Ability to work effectively in a fast-paced, dynamic environment is required. What Desired Skills You'll Bring: Cloud Certifications: Active professional-level cloud certifications highly preferred, such as AWS Certified DevOps Engineer, AWS Certified Solutions Architect, Microsoft Certified: Azure DevOps Engineer Expert, or Azure Solutions Architect Expert. Container Certifications: Certified Kubernetes Administrator (CKA) or Certified Kubernetes Security Specialist (CKS). Advanced familiarity with GitLab for code repositories, pipeline execution, and backlog management.