Canberra, Australia Senior DevSecOps Engineer – AWS BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts.... View job details

Job description

BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding environments. BAE Systems Digital Intelligence are seeking a dynamic and ambitious Software Engineer to join a high-performing team engaged on a range of large-scale public sector engagements. About the role You will design, build and run the AWS platforms behind mission systems for Australian Government and National Security customers. Everything is delivered as code: CloudFormation templates, CodePipeline delivery and Git-controlled change. The environments are classified and accredited, so security is designed in from the first template rather than added at the end. You will be the team's go-to engineer for AWS infrastructure, working alongside systems, network and security engineers. The candidate must hold an active NV1 security clearance and be willing to undergo an upgrade to PV clearance. Key responsibilities • Write, review and maintain best-practice CloudFormation templates from scratch, including nested stacks, StackSets and custom resources • Build, configure and operate AWS CodePipeline delivery for infrastructure and applications • Administer Git and CodeCommit: repository structure, branching strategy, access control and code review • Commission and deploy AWS services as code, including EC2, ECS, EKS, Secrets Manager, Private CA, ElastiCache (Redis), Amazon MQ (RabbitMQ), RDS and OpenSearch • Build security into every deployment: least-privilege IAM, encryption, network segmentation, logging and policy-as-code checks (for example cfn-lint and cfn-guard) • Produce design and as-built documentation and evidence that supports system accreditation against the ISM • Write automation, tooling and application code where the platform needs it • Troubleshoot and fix platform issues across development, test and production environments • Mentor engineers in infrastructure-as-code and DevSecOps practice Essential skills and experience • Strong infrastructure-as-code delivery on AWS using CloudFormation in production • Ability to write best-practice CloudFormation templates from scratch, not only adapt existing ones • Hands-on configuration and operation of AWS CodePipeline (with CodeBuild and CodeDeploy) • Experienced Git administrator; CodeCommit experience preferred, though strong Git skills on another platform will be considered • Extensive knowledge of AWS infrastructure services, including Secrets Manager, EC2, ECS, EKS, Private CA, Redis, RabbitMQ, RDS and OpenSearch • Proven ability to commission and deploy those services entirely through infrastructure as code • Extensive software development skills in at least one language such as Python, Go, TypeScript or Java • Experience working in secure environments and delivering solutions that are secure by design • Candidates whose infrastructure-as-code experience is mainly Terraform or AWS CDK are encouraged to apply, provided they can show CloudFormation depth at interview. Desirable skills and experience Experience in any one of them is a strong advantage. • SIEM administration (for example Splunk, Elastic or Microsoft Sentinel) • ITSM platform administration (for example ServiceNow or Jira Service Management) • Threat intelligence platform administration (for example MISP or OpenCTI) • Wider Linux and Windows system administration • Experience with ISM, Essential Eight, IRAP assessments or accredited systems • AWS Certified DevOps Engineer – Professional, or AWS Certified Security – Specialty Why BAE Systems? This is a place where you’ll be able to make a real difference. You’ll be part of an inclusive culture that values diversity of thought, rewards integrity, and merit, and where you’ll be empowered to fulfil your potential. We welcome people from all backgrounds and want to make sure that our recruitment processes are as inclusive as possible. If you have a disability or health condition (for example dyslexia, autism, an anxiety disorder etc.) that may affect your performance in certain assessment types, please speak to your recruiter about potential reasonable adjustments. Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. Engineering Experienced professionals What we're proud of 110,000+ diverse workforce in more than 40 countries 40,959 hours volunteered by our employees working with charities and not-for-profit organisations • 110,000+ diverse workforce in more than 40 countries • 40,959 hours volunteered by our employees working with charities and not-for-profit organisations Apply now Back to top Related jobs Canberra, Australia TSPV Software Engineer BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence... View job details Canberra, Australia Solution Architect BAE Systems Digital Intelligence is home to 4,800 digital, cyber and intelligence experts. We... View job details Our reviews Read what colleagues past and present have to say about life at BAE Systems. Read more --> Company Culture Life at BAE Systems Within a growing network of around 100,000 colleagues in more than 40 countries, our teams bring together people with diverse skills, ways of thinking and backgrounds - while our work spans the depths of the ocean to the far reaches of space. Tackling complex problems. Building innovative solutions. This is a place where you can make real change happen, for your career and the world. Discover more Want to know more? Inclusion We want everyone here to feel valued and empowered to thrive. Who you are should never define what you can do. We believe when you bring together different people and perspectives it inspires creativity and drives innovation, helping us fulfil our purpose and is integral to our culture. Everyone is heard and respected here. Learn more Learning and development If you’re curious, hungry for more responsibility, and prepared to step out of your comfort zone, there are endless opportunities to grow with us. At every stage of your career our first-class training, coaching and development programmes, role models and mentors will help you embrace your potential and take the next step. Learn more Rewards and benefits Great work deserves benefits that go beyond your salary. Whether it’s health, wellbeing, or financial security for you and your family – our flexible benefits help you focus on what’s important to you. Learn more Making an impact Together we embrace every opportunity to have a positive impact. On the world around us, our communities, and each other. Learn more