GMD DevSecOps Engineer

APEX TK is looking for an experienced, team-oriented GMD DevSecOps Engineer to join our team! In this role, you will provide critical support to GM's Digital Acquisition & Infrastructure team and primarily be responsible for architecting, building, and scaling the DevSecOps Environment within the Integrated Digital Data Environment (IDDE).

• →Architect and provision the IDDE DevSecOps environment using Terraform to ensure scalable, repeatable, and version-controlled infrastructure deployments.
• →Deploy, manage, and scale containerized applications and microservices using Kubernetes, ensuring high availability and resilience for mission-critical workloads.
• →Design, implement, and maintain advanced continuous integration and continuous deployment (CI/CD pipelines) to fully automate software building, testing, and deployment processes.
• →Act as a system administrator within the IDDE across hybrid cloud environments (AWS and Azure). Manage tool deployment, infrastructure configuration, Windows Active Directory, and user account management.
• →Collaborate with cyber engineers to execute STIG evaluation, analysis, and implementation. Embed automated security and code scanning tools directly into the CI/CD pipelines to ensure high software security standards.
• →Support deliverable and release objectives, create comprehensive product/infrastructure documentation, and manage complex deployment orchestration.

• Master’s Degree + 12 years relevant experience, or Bachelor's + 20 years exp is required.
• Active security clearance (SECRET or above) is required.
• Hands-on experience using Terraform for complex Infrastructure as Code (IaC) deployments.
• Proficieny in building, deploying, and managing containerized environments using Kubernetes.
• Demonstrated experience designing and maintaining automated CI/CD pipelines (e.g., GitLab CI, Jenkins, Azure DevOps).
• Hands-on operational experience working within enterprise cloud environments, specifically Microsoft Azure and AWS.
• Proven experience in Windows Server administration, Windows Active Directory, Group Policy Objects (GPOs), and System Center Configuration Manager (SCCM).
• Demonstrated experience in STIG analysis, deployment orchestration, and security/code scanning tools.
• Prior experience with Integrated Development Environments, such as Coder.
• CompTIA Security+ certification (Required for baseline DoD compliance).
• Excellent communication, collaboration, and leadership skills are required.
• Ability to work effectively in a fast-paced, dynamic environment is required.

• Cloud Certifications: Active professional-level cloud certifications highly preferred, such as AWS Certified DevOps Engineer, AWS Certified Solutions Architect, Microsoft Certified: Azure DevOps Engineer Expert, or Azure Solutions Architect Expert.
• Container Certifications: Certified Kubernetes Administrator (CKA) or Certified Kubernetes Security Specialist (CKS).
• Advanced familiarity with GitLab for code repositories, pipeline execution, and backlog management.