DevSecops Engineer
- KAnand Corporation
14 Hours Ago
NA
W2
Remote
10-20 Years
Required Skills: DevSecOps Engineer, OpenStack Cloud, Terraform, Bash, Kubernetes, Docker, Splunk, Vector, Apache Kafka, HashiCorp Vault, Key Management Service, KMS, Federal Risk and Authorization Management Program, FedRAMP, ISO 27001, Federal Information Processing Standards, FIPS, Linux Systems Administration
Job Description
DevSecops Engineer (Openstack Cloud, Terraform , Bash, Kubernetes, Docker, Splunk, Vector, or Kafka, Vault, KMS,FedRAMP, ISO 27001,FIPS)
Designs, automates, and secures infrastructure and deployment pipelines, combining solid engineering fundamentals with a strong security mindset – building systems that are fast, reproducible, and trustworthy from the first line of code to production deployment on OpenStack-based sovereign cloud environments.
Key Responsibilities
• Develop, maintain, and improve CI/CD pipelines to ensure secure, repeatable software delivery.
• Implement and manage Infrastructure as Code using Terraform, Ansible, and scripting (Bash, Python).
• Integrate security and compliance controls into build and release workflows, emphasizing continuous validation and traceability.
• Collaborate with developers, platform engineers, and security teams to improve reliability, performance, and observability.
• Support automation of infrastructure provisioning, configuration management, and policy enforcement across cloud and on-premises environments.
• Monitor, troubleshoot, and optimize deployments using telemetry and event-driven tooling (Prometheus, Splunk, or ELK).
• Participate in threat modeling, patch management, and hardening of systems, containers, and CI/CD components.
• Contribute to knowledge sharing and documentation of DevSecOps patterns and best practices.
• Develop, maintain, and improve CI/CD pipelines to ensure secure, repeatable software delivery.
• Implement and manage Infrastructure as Code using Terraform, Ansible, and scripting (Bash, Python).
• Integrate security and compliance controls into build and release workflows, emphasizing continuous validation and traceability.
• Collaborate with developers, platform engineers, and security teams to improve reliability, performance, and observability.
• Support automation of infrastructure provisioning, configuration management, and policy enforcement across cloud and on-premises environments.
• Monitor, troubleshoot, and optimize deployments using telemetry and event-driven tooling (Prometheus, Splunk, or ELK).
• Participate in threat modeling, patch management, and hardening of systems, containers, and CI/CD components.
• Contribute to knowledge sharing and documentation of DevSecOps patterns and best practices.
Required Skills & Experience
• 6+ years of proven experience with Terraform, Ansible, and Bash scripting in production environments.
• Experience with cloud platforms (OpenStack) and containerized workloads (Kubernetes, Docker).
• Working knowledge of CI/CD tools such as GitLab CI, Concourse, or GitHub Actions.
• Understanding of secure configuration management, least privilege, and identity management concepts.
• Experience troubleshooting complex system issues across application, network, and OS layers.
• Solid grasp of Linux systems administration and infrastructure fundamentals.
• Excellent collaboration and documentation skills with an emphasis on automation and simplicity.
• 6+ years of proven experience with Terraform, Ansible, and Bash scripting in production environments.
• Experience with cloud platforms (OpenStack) and containerized workloads (Kubernetes, Docker).
• Working knowledge of CI/CD tools such as GitLab CI, Concourse, or GitHub Actions.
• Understanding of secure configuration management, least privilege, and identity management concepts.
• Experience troubleshooting complex system issues across application, network, and OS layers.
• Solid grasp of Linux systems administration and infrastructure fundamentals.
• Excellent collaboration and documentation skills with an emphasis on automation and simplicity.
Nice to Have
• Familiarity with logging and observability tools (Splunk, Vector, or Kafka).
• Knowledge of Vault, KMS, or secret management best practices.
• Understanding of compliance frameworks (FedRAMP, ISO 27001, CIS, or NIST 800-53).
• Awareness of FIPS-compliant cryptography or secure enclave deployments.
• Familiarity with logging and observability tools (Splunk, Vector, or Kafka).
• Knowledge of Vault, KMS, or secret management best practices.
• Understanding of compliance frameworks (FedRAMP, ISO 27001, CIS, or NIST 800-53).
• Awareness of FIPS-compliant cryptography or secure enclave deployments.
