DevSecOps Engineer

Role Description

Seeking an experienced DevSecOps Engineer to develop secure CI/CD pipelines, automate infrastructure provisioning, and integrate security and compliance controls across cloud and on-premises environments.

Roles & Responsibilities

• Develop, maintain, and optimize secure, repeatable CI/CD pipelines with continuous validation and traceability.

• Implement Infrastructure as Code (IaC) using Terraform, Ansible, Bash, and Python.

• Automate infrastructure provisioning, configuration management, and policy enforcement.

• Integrate security and compliance controls into build and release workflows.

• Monitor and troubleshoot deployments using Prometheus, Splunk, or ELK.

• Collaborate with development, platform, and security teams to improve reliability, performance, and observability.

• Perform threat modeling, patch management, and hardening of systems, containers, and CI/CD components.

• Document DevSecOps best practices and support knowledge sharing.

Required Skills

• 6+ years of experience with Terraform, Ansible, and Bash scripting in production environments.

• Experience with OpenStack, Kubernetes, and Docker.

• Knowledge of CI/CD tools such as GitLab CI, Concourse, or GitHub Actions.

• Understanding of secure configuration management, least privilege, and identity management.

• Strong Linux system administration and infrastructure fundamentals.

• Ability to troubleshoot complex application, network, and operating system issues.

• Strong collaboration, documentation, and automation skills.

Desirable Skills

• Logging and observability tools: Splunk, Vector, or Kafka.

• Secrets management using Vault or KMS.

• Compliance frameworks: FedRAMP, ISO 27001, CIS, or NIST 800-53.

• FIPS-compliant cryptography and secure enclave deployments.

Experience Required

6–8 years