Devsecops Engineer

Role Summary

We are looking for a Senior DevSecOps Engineer with 5 - 6 years of experience in CI/CD, cloud platforms, infrastructure automation, container platforms, and DevSecOps practices. The ideal candidate should have hands-on experience in building secure deployment pipelines, automating infrastructure, and onboarding both modern and traditional (IBM COBOL-based) applications onto an enterprise DevSecOps platform.

Key Responsibilities

• Design, develop, and maintain CI/CD pipelines using GitLab, Jenkins, and ArgoCD.
• Assess existing IBM COBOL/legacy application build and deployment processes and identify automation opportunities.
• Automate infrastructure provisioning using Terraform.
• Deploy and manage applications on AWS (EC2, ECS, EKS, Lambda).
• Implement GitOps-based deployments for Kubernetes environments.
• Integrate security scanning tools such as Trivy and WebInspect into CI/CD pipelines.
• Manage secrets using HashiCorp Vault.
• Configure and support application monitoring using Dynatrace and OpenTelemetry.
• Manage application artifacts using Nexus Repository.
• Support containerized workloads on Docker, Kubernetes, and EKS.
• Collaborate with Development, Infrastructure, Security, QA, and Operations teams to standardize DevSecOps practices.
• Develop deployment automation, rollback strategies, operational runbooks, and onboarding documentation.
• Contribute to platform engineering initiatives, DevSecOps standardization, and continuous improvement.

Required Skills

• Experience supporting IBM COBOL-based or other legacy enterprise applications, including build, deployment, and release processes
• Strong experience with GitLab, Jenkins, ArgoCD
• Hands-on experience with AWS (EC2, ECS, EKS, Lambda)
• Good knowledge of Terraform and Infrastructure as Code (IaC)
• Experience with Docker and Kubernetes
• Knowledge of Trivy, Vault, Nexus Repository, Dynatrace, and OpenTelemetry
• Familiarity with JMeter and CI/CD-integrated testing
• Scripting experience using Shell, Bash, Python, or Groovy
• Good understanding of DevSecOps, GitOps, and Secure SDLC.

Good to Have

• Exposure to Azure and Oracle Cloud Infrastructure (OCI)
• Knowledge of JCL, batch processing, and enterprise legacy application environments.
• Experience with Karpenter
• Understanding of DORA Metrics and Site Reliability Engineering (SRE)
• Experience supporting legacy application onboarding to DevSecOps platforms.

Qualifications

• Bachelors degree in computer science, Information Technology, or a related field.
• Relevant AWS, Kubernetes, Terraform, or DevOps certifications are preferred.