DevSecOps Engineer

Overview

This role combines expertise in software development and IT operations to design, implement, and maintain automated processes for building, testing, and deploying software applications and infrastructure. The role is responsible for Continuous Integration and Continuous Deployment (CI/CD) operations, ensuring software and infrastructure are delivered in a secure, reliable, and repeatable manner.

The successful candidate will collaborate closely with development, quality assurance, system administration, and infrastructure teams to streamline the software development lifecycle, reduce manual intervention, and improve overall software quality, security, and reliability. A strong understanding of Dev Ops practices, automation, security, and agile methodologies is essential

• Design, implement, maintain, and improve CI/CD pipelines for software and infrastructure.

• Automate repetitive tasks to reduce manual intervention and increase consistency.

• Ensure secure, repeatable, and reliable software builds and deployments.

• Maintain and upgrade the Dev Ops toolchain (e.g., Maven, Git Lab, Jenkins, Nexus).

• Assess existing software lifecycle processes and identify opportunities for optimization.

• Analyze, prioritize, design, estimate, develop, and document process automation initiatives.

• Select, manage, and maintain tools and technologies to optimize the Dev Ops toolchain.

• Develop scripts, code, and tools to support software and infrastructure delivery.

• Implement and support automated security scanning and testing (SAST, DAST, SCA).

• Identify, secure, and report on security issues within software and infrastructure tool chains.

• Ensure compliance with software and infrastructure lifecycle processes and procedures.

• Monitor day-to-day build and deployment activities and support product and project teams with Dev Ops-related issues.

This list of responsibilities might not cover everything you'll end up doing.

• Excellent problem-solving and analytical skills.

• Basic working knowledge across multiple disciplines, including:

  • Coding and Scripting: Java, Python, Go, Oracle PL/SQL, Bash, Groovy, JSON, XML

  • Build and Deployment Tools: Maven, Gradle, PyPi, NPM, Make, Git/Git Lab, Jenkins, Nexus, Ansible, Terraform, Web Logic, Redgate

  • Infrastructure and Platforms: Google Cloud Platform, Oracle Cloud Infrastructure, Docker/Podman, Kubernetes, Virtual Machines

  • Systems and Databases: Linux system administration, network administration, Oracle database administration

• Understanding of software engineering, infrastructure management, cloud computing, testing, quality assurance, and source code management.

• Familiarity with agile development methodologies.

• Strong interpersonal skills and the ability to collaborate effectively with cross-functional teams.

• Ability to bring diverse technical teams to consensus.

• Experience performing or contributing to security risk assessments.