DevSecOps Engineer

Position Overview:

As a Dev Sec Ops  Engineer
, you will be responsible for designing, implementing, and maintaining secure, automated, and scalable Dev Sec Ops  solutions. You will work closely with development, security, and operations teams to integrate security best practices into the software development lifecycle while optimizing CI/CD pipelines, containerized deployments, and cloud infrastructure.

This position requires expertise in Kubernetes (RKE2/Open Shift), API security, Infrastructure as Code (IaC), secure containerization, and automated security compliance
.

• Automate and optimize secure service deployments in on-premise and cloud environments.
• Design and implement Git Ops workflows using Git Lab CI/CD, ArgoCD, or FluxCD for secure and scalable deployments.
• Develop and maintain Helm charts and Kubernetes manifests to standardize application deployments.
• Implement security best practices within CI/CD pipelines to automate code scanning, vulnerability assessments, and security compliance
  .
• Harden container images using FIPS-compliant security standards, leveraging UBI9-minimal and UBI9-micro base images
  .
• Security & Compliance Integration
  • Apply zero-trust security principles to Dev Ops workflows, ensuring secure authentication, authorization, and encryption.
  • Automate security monitoring and implement runtime security enforcement within Kubernetes environments.
  • Conduct regular security assessments, audits, and penetration testing to identify and mitigate vulnerabilities.
  • Integrate and manage enterprise authentication solutions (e.g.,
    LDAP, Keycloak, OAuth, SAML
    ) for secure access control.
  • Implement role-based access control (RBAC) and security policies for Kubernetes and cloud infrastructure.

• Kubernetes & Cloud Infrastructure Management
  • Deploy, manage, and secure Kubernetes (RKE2, Open Shift) clusters for on-premise and cloud workloads.
  • Optimize containerized environments for performance, scalability, and security using custom Kubernetes operators
    .
  • Implement and maintain observability and logging solutions using Grafana, Prometheus, ELK, or Open Telemetry
    .
  • Configure network policies, service meshes, and ingress controllers to enforce security policies.
  • Collaborate with cloud security teams to implement hardened cloud infrastructure and security configurations.

• Infrastructure as Code (IaC) & Configuration Management
  • Develop and maintain Infrastructure as Code (IaC) solutions using Terraform and Ansible for consistent and scalable infrastructure management.
  • Automate system patching, updates, and compliance policies across containerized and VM-based environments.
  • Maintain up-to-date documentation of security controls, designs, and operational configurations.

• Collaboration & Incident Response
  • Work closely with development, security, and operations teams to integrate Dev Sec Ops  best practices into the software development lifecycle.
  • Provide technical guidance and training to teams on secure coding, Dev Sec Ops  workflows, and infrastructure security
    .
  • Participate in incident response and forensic analysis to identify and mitigate security threats.