DevSecOps Engineer

Job Overview

The DevSecOps Engineer will be responsible for designing, automating, securing, and maintaining scalable and resilient infrastructure and deployment pipelines across hybrid and multi-cloud environments. The role requires strong expertise in cloud platforms, infrastructure automation, containerization, CI/CD, security engineering, and modern DevOps practices.

The successful candidate will work closely with development, infrastructure, and security teams to integrate security throughout the software development lifecycle and ensure reliable, secure, and highly available technology platforms.

Key Responsibilities

Design, develop, automate, and maintain infrastructure and deployment processes across data centers and cloud environments.

Develop automation solutions that enable teams to deploy, manage, scale, and monitor applications efficiently.

Design and maintain secure CI/CD pipelines, incorporating automated security controls and streamlined release processes.

Develop scripts and automation tools to support software build, integration, testing, and deployment across development, QA, and production environments.

Automate infrastructure provisioning and configuration management using tools such as Terraform and Ansible.

Provision and manage virtual machines, databases, containers, and other infrastructure resources.

Deploy and maintain containerized workloads using Docker and Kubernetes.

Implement infrastructure monitoring, observability, and alerting solutions to monitor system performance, utilization, availability, and health.

Troubleshoot and resolve complex infrastructure, application, and security issues, including participation in on-call support for critical incidents.

Design and implement high-availability, resilient, and scalable infrastructure across hybrid cloud and multi-data-center environments.

Implement configuration management, backup, disaster recovery, and business continuity processes.

Implement security controls across cloud infrastructure, CI/CD pipelines, applications, and containerized environments.

Perform vulnerability assessments, security checks, system hardening, threat assessments, and risk assessments.

Monitor and respond to infrastructure and security incidents.

Apply secure configuration standards and industry best practices to infrastructure and applications.

Implement and manage secrets management and access controls using appropriate security technologies.

Ensure infrastructure and security practices align with applicable industry standards and compliance frameworks.

Collaborate with development, infrastructure, operations, and security teams in an Agile environment.

Continuously identify opportunities to improve automation, security, reliability, performance, and operational efficiency.

Required Qualifications & Experience

Degree or Diploma in Computer Science, Computer/Electronics Engineering, Information Technology, or a related discipline.

Strong understanding of SDLC, Continuous Integration (CI), Continuous Delivery (CD), and modern DevOps practices.

Strong experience working with high-availability, high-performance, and high-security systems across multi-data-center and hybrid cloud environments.

Hands-on experience with

AWS, Microsoft Azure, and Google Cloud Platform (GCP)

.

Strong experience with

Terraform and Ansible

for infrastructure provisioning and configuration management.

Strong hands-on experience with

Docker and Kubernetes

.

Experience designing and managing

GitLab CI/CD pipelines

.

Strong understanding of Git and modern branching strategies.

Proficiency in at least three scripting/programming languages such as

Bash, PowerShell, Python, or Go

.

Experience with infrastructure monitoring and observability, particularly

Prometheus

.

Knowledge of CNCF technologies such as

Helm, ArgoCD, Istio, Gatekeeper, and Crossplane

.

Experience with virtualization technologies such as

KVM, VMware, or Hyper-V

.

Experience with disaster recovery, system backup, and restoration processes.

Knowledge of RPM-based software packaging and deployment.

Strong troubleshooting and problem-solving skills across infrastructure, operating systems, applications, and network layers.

Security & Compliance

Hands-on experience implementing security controls within CI/CD pipelines and cloud-native environments.

Experience with vulnerability scanning, security assessments, and system hardening.

Experience with

HashiCorp Vault

or other enterprise secrets-management solutions.

Familiarity with enterprise security tools such as

Tenable, HP Fortify, Sonatype Nexus IQ, ElasticSearch Enterprise, and AWS security services

.

Strong understanding of network security concepts including firewalls, subnets, routing, access controls, and network segmentation.

Experience conducting security assessments within government or highly regulated environments.

Understanding of secure cloud architecture, API security, secrets management, and zero-trust principles.

Preferred / Advantageous Skills

Security certifications such as

CISSP, CISM, CREST

, or relevant cloud-security certifications.

Experience supporting or contributing to a

DevSecOps transformation

.

Knowledge of

ISO 27001, NIST, and CIS Benchmarks

.

Experience with

Istio or Linkerd

and service-mesh security.

Experience with additional CI/CD and DevOps tools such as Jenkins, Bitbucket, and ArgoCD.

Experience with cloud security services and enterprise security platforms.

Core Technical Skills

Cloud:

AWS, Azure, Google Cloud

Infrastructure as Code:

Terraform, Ansible

Containers:

Docker, Kubernetes

CI/CD:

GitLab CI/CD

Monitoring:

Prometheus

Secrets Management:

HashiCorp Vault

Scripting:

Bash, PowerShell, Python, Go

CNCF:

Helm, ArgoCD, Istio, Gatekeeper, Crossplane

Virtualization:

KVM, VMware, Hyper-V

Security:

Vulnerability Assessment, Security Hardening, Threat & Risk Assessment, Zero Trust, API Security

Compliance:

NIST, ISO 27001, CIS Benchmarks

Security Tools:

Tenable, HP Fortify, Sonatype Nexus IQ, AWS Security Services