DevSecOps Engineer

We are looking for a DevSecOps engineer with a strong background on containerization technology (compliancy and security assessment, implementing and maintaining base layers, and assist with complex containerized deployments and infrastructure as code (Terraform & Ansible) to support our client's team.
 
Responsibilities:
 ​

• Develop / update Jenkins and Azure DevOps pipelines;
  
• Implement security scanning for containers;
  
• Implement compliancy scanning for containers;
  
• Signing of containers;
  
• Develop and maintain secure common base layers for containers, including applying required hardening settings;
  
• Develop / maintain infrastructure as code for deployment and configuration of infrastructure (VMs, Disks), core services (AD, CA, Exchange etc.); and applications (NATO and Commercial Application)
  
• Define standard for infrastructure as code;
  
• Create pipelines and self-service solutions for deploying test environments using infrastructure as code.
  

Requirements

• The candidate has extensive and recent experience with and knowledge of Continuous integration and delivery, including the following tools and technologies and concepts:
  
• Git,
  
• Ansible,
  
• Docker,
  
• Jenkins,
  
• Terraform,
  
• Infrastructure as Code such as ARM,
  
• Designing and implementing build/deploy pipelines,
  
• Application security/code quality testing tools such as SonarQube, Checkmarx or OWASP Dependency Check,
  
• The candidate has extensive and recent experience with and knowledge of Continuous Operations, including the following tools and technologies and concepts:
  
• Kubernetes,
  
• Telemetry/Monitoring solutions such as Application Insights, Azure Monitor or Prometheus,
  
• Helm,
  
• Container Registry,
  
• Container vulnerability scanning tools such as Trivy and Anchore.
  
• Fluent English.
  

Nice to have:

• Java and NodeJS/JavaScript;
  
• Development tools (e.g. Maven, Jira, GitLab, Zephyr) and the Scrum methodology;
  
• Shift left/right testing using test automation tools such Junit/NUnit, Selenium, Protractor, Cucumber.