DevOps Engineer III (2024)

SRA’s mission is to level up every day to protect our clients and their customers. This begins with our team members and their experience. SRA prides itself on maintaining a culture where team members have a shared sense of support and belonging, consistent with our It’s Personal company value. At SRA, we prioritize transparent career pathing, varied DEI programming and community groups, competitive benefits including mental health support, and an emphasis on a sustainable, healthy, and engaging work culture. SRA has twice been named a Best Place to Work by the Philadelphia Business Journal.

The DevOps Engineer III position will be part of Security Risk Advisors’ Software Development Team. We team with SRA’s Advisory Services, CyberSOC, and Research & Innovation teams to enhance our information security consulting practice in addition to building and deploying tools that serve our employees and our clients.

We are rapidly improving our flagship product, VECTR (http://vectr.io/), an industry recognized Purple Team management and reporting platform. We’re looking for new team members to help us grow VECTR and build additional information security tools. This is an outstanding opportunity to work in a growing niche and interact with well-known client organizations.

Primary Responsibilities:

• Infrastructure Design and Implementation: Designing and implementing DevOps infrastructure tools and strategies for SaaS products.
• Environment Maintenance and Optimization: Regular deployment maintenance, ensuring swift resolution of any potential issues by tuning the hosting environment, making recommendations for improvements, and ensuring the software product is up and running.
• Security Positioning: Ensure that the developed software and system infrastructure stay secure. This includes implementing security best practices, creating secure development and deployment practices, and quickly responding to reported vulnerabilities. Protect organization's value by keeping information confidential.
• CI/CD Management: Assist Software Development team with implementation and maintenance of Continuous Integration/Continuous Deployment tooling like Bitbucket Pipelines.

• Documentation: Creating, maintaining, and updating systems documentation and design specifications.

• 5+ years previous professional operations or DevOps experience working with cloud or virtualized installations of custom software.

• Containerization Experience: Deep understanding of Docker and other containerization technology and orchestration.
• Cloud Platforms: Demonstrated experience with cloud service providers such as AWS, GCP, or Azure, particularly their Kubernetes offerings such as Amazon EKS, Google Kubernetes Engine, and Azure Kubernetes Service.
• Strong in CI/CD Pipelines: Knowledge of continuous integration and continuous deployment/delivery methodologies and tools like Jenkins, GitLab, CircleCI, and ArgoCD.
• Programming and Scripting: Proficiency in a scripting language such as Python, Go, or Bash and a strong understanding of infrastructure as code (IaC) tools like Terraform, Ansible and Helm.
• Security Best Practices: Deep understanding of standard security protocols, vulnerability management, encryption, and secure coding practices.

• Monitoring and Logging: Experience with monitoring and log analysis tools such as Prometheus, Grafana, ELK Stack (Elasticsearch, Logstash, Kibana), or similar platforms.
• Network Knowledge: Solid understanding of network topologies and common network protocols and services (DNS, HTTP(S), SSH, FTP, SMTP), along with network security strategies.
• Problem-Solving Skills: Strong troubleshooting skills to diagnose and address issues within the Kubernetes environment and broader CI/CD pipeline.
• Communication and Collaboration: Excellent interpersonal and communication skills for collaborating with different teams, and an understanding of Agile development practices.
• (Preferred) Proficient in Kubernetes: Must be able to deploy, configure, and manage Kubernetes clusters along with services and pods.

• While rare, willingness to work extended hours to meet deadlines.
• Ability to work independently and articulate progress of projects to management.
• Punctuality and timely attendance to external client and internal stakeholder needs.
• Bachelor’s degree in information technology or equivalent subject matter or experience.

These Essential Functions, Requirements, and Skills are guidelines. If you are a candidate who does not meet this exact job description but can demonstrate excellent organization, attention to detail, professionalism, flexibility, and self-direction in your professional background, we hope you apply. SRA values a diverse workplace and strongly encourages women, people of color, LGBTQ+ individuals, people with disabilities, members of ethnic minorities, and veterans to apply. 

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. 

This job operates in a professional office environment or remotely as needed. This role routinely uses standard office equipment. 

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. While performing the duties of this job, the employee is regularly required to talk and hear; use hands to finger, handle, or feel; and reach with hands and arms. The employee frequently is required to stand and walk. This is a largely sedentary role.

This is a full-time position and hours of work and days are Monday through Friday 8:30am to 5pm. Occasional evening and weekend work may be required as job duties demand. 

Other Duties

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice. 

EEO Statement

Security Risk Advisors is an Equal Opportunity Employer and prohibits discrimination or harassment of any kind. All employment decisions at SRA are based on business needs, job requirements, and individual qualifications, without regard to race, color, sex, sexual orientation, gender identity or expression, age, religion, national origin, disability, marital or family status, veteran status, medical condition, or any similar category protected under federal, state, or local laws.   

Work with Experts: Robust internal training program, plus Company-paid external training. SRA recognizes the value of professional development for employees. Therefore, we encourage our employees to pursue continuing education and role-specific training. Every SRA employee is eligible to attend one training per year paid for by SRA.

Corps Training Program: Our SRA Corps training program is a six-week experience for May new hires that begins with one week of orientation at our Philadelphia headquarters. Whether new hires are interns, co-ops, or full-time consultants, SRA Corps members meet our founders, learn our values, and experience a day in the life of a cybersecurity consultant. Following orientation, Corps members return to their home office and participate in trainings such as Consulting 101, Enterprise Networks, Cloud Security and more. Our leaders provide hands-on offensive, defensive, and frameworks boot camps.

Mental Health Services: SRA has partnered with BetterHelp to provide SRA employees with free mental health support. BetterHelp connects individuals with licensed therapists for chat, video, and phone sessions.

Medical / Dental / Other (regular full-time employees only)

• Generous medical, dental, and vision benefits at different price points.
• Company-paid disability and life insurance.
• Company 401(k) plan including annual 3% safe harbor contribution.
• Free patient advocacy service that helps find care providers and resolve insurance queries.
• Free on-site wellness programming covering both emotional and physical wellness.
• Generous parental leave, sick leave, and vacation policies.
• Option to work remotely or with a flexible schedule when needed.
• Company-paid cell phone with discounted accessories.
• 1-2-3 Give Program: 1. SRA will give $1,000 to a charity of your choice. 2. If you give an additional amount (up to $1,000), then 3. SRA will match that amount up to $1,000.

(Subject to change)