DevOps​/DevSecOps Engineer​/GCP : W2

Dev Sec Ops  Engineer (Google Cloud Platform – ITAR Environment)

Location:

Bloomington, MN. (Hybrid)

Long term contract

• 5+ years of experience in Dev Ops, Cloud Engineering, or Dev Sec Ops  roles.
• Hands-on experience with Google Cloud Platform (GCP).
• Strong experience with CI/CD pipeline development.
• Experience with Infrastructure as Code
• Experience with containerization and Kubernetes.
• Knowledge of secure software development practices.
• Experience with cloud security frameworks and compliance requirements.

• Design, implement, and maintain secure cloud infrastructure in Google Cloud Platform (GCP).
• Implement security controls, monitoring, and compliance automation aligned with ITAR, NIST, CMMC and corporate security standards.
• Configure and maintain IAM policies, network segmentation, and secure access controls.

• Build and maintain secure CI/CD pipelines using tools such as:
  • Jenkins
  • Git Lab CI/CD
  • Git Hub Actions
  • Cloud Build
• Integrate automated security scanning into pipelines including:
  • SAST
  • DAST
  • container vulnerability scanning
  • dependency scanning
• Automate infrastructure deployments using Infrastructure as Code (IaC) tools.

• Secure containerized workloads running on GKE (Google Kubernetes Engine).
• Implement container security best practices including:
  • image scanning
  • runtime protection
  • secrets management
• Maintain Kubernetes security configurations and policies.