DevOps Engineer

Description Key Responsibilities

• Support the publication and lifecycle management of wallet apps in the Apple App Store and Google Play Store
  , overseeing release coordination, staged rollouts, and app health monitoring.
• Design and deploy app attestation infrastructure using Apple App Attest and Google Play Integrity API to ensure wallet.
• Architect, deploy, and manage Azure cloud infrastructure and Kubernetes (AKS/Open Shift) clusters/workloads, ensuring reliability, scalability, and secure multi‑environment operations.
• Build and manage containerized workloads using Docker/Podman
  , infrastructure‑as‑code with Terraform/Ansible
  , and secure integrations with relational databases and event‑driven systems.
• Implement Dev Sec Ops  practices including SAST/DAST scanning, secrets management, certificate rotation, vulnerability remediation, and compliance with identity trust frameworks (PCTF, NIST, eIDAS) and organization cybersecurity policies.
• Conduct load testing, performance benchmarking, and continuous hardening of backend, wallet, and cloud components.
• Implement observability and logging stacks (
  Prometheus, Grafana, Azure Log Analytics
  ) and integrate crash analytics tools (Crashlytics, App Center) to drive stability and reliability improvements.
• Collaborate with architects, developers, cybersecurity teams, and stakeholders to ensure cohesive delivery across wallet, agent, and platform components.
• Produce documentation such as deployment architectures, runbooks, procedures, and operational playbooks while mentoring engineers in cloud, Kubernetes, and Dev Ops best practices.

• Implement automated delivery pipelines for digital credentials mobile wallet builds, ensuring consistent signing, versioning, and distribution through CI/CD processes.
• Support publication and lifecycle management of mobile wallet applications in the Apple App Store and Google Play Store
  , ensuring compliance with platform requirements, signing procedures, and release governance.
• Collaborate with product managers, technical lead, mobile developers and testers to coordinate release readiness, testing cycles, staged rollouts, and monitoring of app health across stores.
• Design and implement backend app attestation infrastructure enabling validation of mobile wallet integrity using Apple App Attest and Google Play Integrity API
  . Implement push notifications using tools such as Firebase.
• Collaborate with mobile engineering teams to embed attestation logic into wallet apps, strengthen anti‑tampering controls, and enhance overall platform security posture.

• Implement load-testing and performance benchmarking using tools such as Locust or JMeter to validate system scalability under peak credential issuance and verification loads.
• Enforce SDLC, code quality, and Dev Ops best practices—including code reviews, secure Integrate Dev Sec Ops practices into all CI/CD workflows, embedding security scanning, SAST/DAST, secret detection, and container image scanning into pipelines.
• Manage secure configuration of infrastructure including TLS certificate rotation, secret management, encryption policies, network segmentation, and hardened OS baselines.
• Work with teams to implement identity and access management, privileged access controls, threat modeling, and continuous compliance monitoring.
• Conduct regular infrastructure hardening, patching, library updates, dependency audits, and vulnerability remediation cycles for wallet, agent, and backend components.
• Experience with scripting languages like Python and Bash
• Ensure alignment with digital identity trust frameworks (PCTF, NIST, eIDAS) and enterprise cybersecurity policies.
• An expert in architecting, building, and maintaining Azure cloud infrastructure that supports the digital credential platform, ensuring high availability, resilience, and secure multi‑environment deployments.
• Build and manage containerized workloads using Docker
  /
  Podman
  , applying secure image management, registry automation, and runtime hardening.
• Design and operate Kubernetes production clusters (AKS…