DevSecOps Engineer

Key Responsibilities:

• Setup and manage CI/CD infrastructure, provision and maintain service accounts, manage tokens and certificates for tools/apps/services, and perform server maintenance, backups, and recovery planning.
• Design, implement, and maintain CI/CD pipelines; create common build platforms; setup and manage Jenkins servers and build agents.
• Configure and maintain environments across all stages of the development pipeline.
• Implement pipeline monitoring, alerting, and logging to track resource usage; create dashboards to monitor embedded software builds and performance.
• Integrate security practices throughout the SDLC, including vulnerability scanning, code analysis, and compliance checks.
• Develop automation scripts and tools to streamline tasks, reduce manual errors, and embed compliance checks within pipelines.
• Enforce security best practices in cloud environments to safeguard resources and data.
• Work closely with development, operations, and security teams to foster a security-first culture and ensure effective collaboration.
• Develop and maintain standard operating procedures and related documentation.
• Provide work estimates, status reports, and mentor junior engineers to build the next generation of technology leaders.

Qualifications:

• 7+ years of DevOps experience with a strong emphasis on security, preferably in embedded product development.
• Proficiency with tools such as Jenkins, GitLab, Docker, Kubernetes, Ansible, Terraform, and Artifactory.
• Strong expertise in cloud platforms (AWS, Azure, GCP) and their security configurations.
• Hands-on experience with automation tools and scripting (e.g., Ansible, Python, PowerShell, Chef, Terraform, Groovy, JavaScript).
• Experience designing, developing, and migrating CI/CD pipelines.
• Familiarity with VMware virtualization products (vSphere, ESXi, vCenter).
• Knowledge of security frameworks and standards (OWASP, NIST, IEC 62443).
• Solid understanding of network security, data encryption, and secure coding practices.
• Excellent grasp of SDLC, CI/CD concepts, and Agile methodologies.
• Strong analytical and creative problem-solving abilities.
• Effective communicator, able to explain technical concepts to non-technical stakeholders.
• Ability to prioritize and manage time in a fast-paced, changing environment.
• High attention to detail and commitment to quality.