DevSecOps Engineer

Position Overview: As a DevSecOps Engineer , you will be responsible for designing, implementing, and maintaining secure, automated, and scalable DevSecOps solutions. You will work closely with development, security, and operations teams to integrate security best practices into the software development lifecycle while optimizing CI/CD pipelines, containerized deployments, and cloud infrastructure. This position requires expertise in Kubernetes (RKE2/OpenShift), API security, Infrastructure as Code (IaC), secure containerization, and automated security compliance . Duties & Responsibilities: DevSecOps & Automation Automate and optimize secure service deployments in on-premise and cloud environments. Design and implement GitOps workflows using GitLab CI/CD, ArgoCD, or FluxCD for secure and scalable deployments. Develop and maintain Helm charts and Kubernetes manifests to standardize application deployments. Implement security best practices within CI/CD pipelines to automate code scanning, vulnerability assessments, and security compliance . Harden container images using FIPS-compliant security standards, leveraging UBI9-minimal and UBI9-micro base images . Security & Compliance Integration Apply zero-trust security principles to DevOps workflows, ensuring secure authentication, authorization, and encryption. Automate security monitoring and implement runtime security enforcement within Kubernetes environments. Conduct regular security assessments, audits, and penetration testing to identify and mitigate vulnerabilities. Integrate and manage enterprise authentication solutions (e.g., LDAP, Keycloak, OAuth, SAML ) for secure access control. Implement role-based access control (RBAC) and security policies for Kubernetes and cloud infrastructure. Kubernetes & Cloud Infrastructure Management Deploy, manage, and secure Kubernetes (RKE2, OpenShift) clusters for on-premise and cloud workloads. Optimize containerized environments for performance, scalability, and security using custom Kubernetes operators . Implement and maintain observability and logging solutions using Grafana, Prometheus, ELK, or OpenTelemetry . Configure network policies, service meshes, and ingress controllers to enforce security policies. Collaborate with cloud security teams to implement hardened cloud infrastructure and security configurations. Infrastructure as Code (IaC) & Configuration Management Develop and maintain Infrastructure as Code (IaC) solutions using Terraform and Ansible for consistent and scalable infrastructure management. Automate system patching, updates, and compliance policies across containerized and VM-based environments. Maintain up-to-date documentation of security controls, designs, and operational configurations. Collaboration & Incident Response Work closely with development, security, and operations teams to integrate DevSecOps best practices into the software development lifecycle. Provide technical guidance and training to teams on secure coding, DevSecOps workflows, and infrastructure security . Participate in incident response and forensic analysis to identify and mitigate security threats. #J-18808-Ljbffr Trevity-LL