DevOps​/DevSecOps Engineer​/GCP : W2

Dev Sec Ops  Engineer (Google Cloud Platform — ITAR Environment)
Location:
Bloomington, MN. (Hybrid)
Long term contract
Required Qualifications

• 5 years of experience in Dev Ops, Cloud Engineering, or Dev Sec Ops  roles.
• Hands-on experience with Google Cloud Platform (GCP).
• Strong experience with CI/CD pipeline development.
• Experience with Infrastructure as Code
• Experience with containerization and Kubernetes.
• Knowledge of secure software development practices.
• Experience with cloud security frameworks and compliance requirements.

Key Responsibilities
Cloud & Infrastructure Security

• Design, implement, and maintain secure cloud infrastructure in Google Cloud Platform (GCP).
• Implement security controls, monitoring, and compliance automation aligned with ITAR, NIST, CMMC and corporate security standards.
• Configure and maintain IAM policies, network segmentation, and secure access controls.

Dev Sec Ops  & CI/CD

• Build and maintain secure CI/CD pipelines using tools such as:
• Jenkins
• Git Lab CI/CD
• Git Hub Actions
• Cloud Build
• Integrate automated security scanning into pipelines including:
• SAST
• DAST
• container vulnerability scanning
• dependency scanning
• Automate infrastructure deployments using Infrastructure as Code (IaC) tools.

Container & Platform Security

• Secure containerized workloads running on GKE (Google Kubernetes Engine).
• Implement container security best practices including:
• image scanning
• runtime protection
• secrets management
• Maintain Kubernetes security configurations and policies.