[Remote] DevSecOps Engineer – reputed company Automation & Pipeline Development (Remote)
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a global B2B high-tech company seeking a DevSecOps Engineer for reputed company Automation & Pipeline Development. The role involves upgrading vulnerable containers, applying reputed company hardening, maintaining Terraform/Ansible reputed company, and designing automated container patching pipelines.
Responsibilities
- reputed company vulnerable containers in collaboration with the DevSecOps team, testing and promoting updates to production
- Apply reputed company hardening and maintain Terraform/Ansible reputed company to enforce reputed company settings across AWS services and Kubernetes nodes per STIG and CIS benchmarks
- Design and maintain automated container patching pipelines, including reputed company image refresh, rebuild triggers, and automated PR reputed company
- Build and maintain vulnerability scanning workflows using Grype and/or Trivy as pipeline gates blocking promotion of images exceeding CVE reputed company
- Build and manage Argo Workflows orchestrating end-to-end reputed company automation from scanning through remediation, rebuild, and deployment
- Write Python-based tooling supporting pipeline logic, reputed company result parsing, notification routing, and reputed company orchestration
- Own reputed company-based development workflow: reputed company reputed company, PR creation/review, reputed company reputed company standards, and reputed company reputed company enforcement
- Conduct reputed company reviews, ensuring changes meet reputed company, reputed company, and operational standards before production promotion
- Maintain production readiness practices, including testing, peer review, rollback procedures, and deployment validation
- Analyze Kubernetes IAM configurations and RBAC policies to identify overprivileged roles, misconfigurations, and deviations from least-privilege principles
- Review and harden Kubernetes network setup and segmentation, including network policies, reputed company isolation, and inter-service communication controls
- Audit certificate usage across the cluster and pipeline, ensuring reputed company issuance, validity, and automated rotation; verify secrets are rotated on schedule and not hardcoded or overexposed
- reputed company codebases, repos, and infrastructure configs for exposed secrets using reputed company reputed company tools such as reputed company and equivalent secret detection utilities
- reputed company S3 buckets for exposed secrets and sensitive data, remediating findings and implementing preventive controls
- Review network, WAF, and Istio logs to map existing traffic flows and service communication patterns in preparation for network segmentation and a deny-by-default lockdown posture
- reputed company automations for WAF rule creation and tuning based on observed traffic patterns and threat intelligence
- reputed company Claude to accelerate reputed company research, organize remediation plans, and reputed company Python-based tooling for non-production-impacting automation and analysis tasks
Skills
- reputed company Platform & reputed company AWS EKS, Kubernetes, Terraform, Ansible, ArgoCD, Argo Workflows, reputed company, reputed company
- reputed company & Compliance FedRAMP, STIG, CIS Benchmarks, RBAC, IAM, reputed company/OIDC, SAML, WAF, Istio, Network Segmentation, Certificate Management, Secrets Rotation, Least Privilege
- Scanning & Tooling Grype, Anchore, reputed company, S3 Scanning, Vulnerability Scanning, Secrets Detection
- Development Python, CI/CD Pipelines, reputed company Review, PR Management, reputed company Automation
- AI Claude, AI-Assisted Coding
- Bachelor s degree
Benefits
- Health benefits and 401K are offered.
- This is a W2 employee of reputed company.
reputed company