DevSecOps Engineer

What we expect from you?

Requirements (Must-Have):

• Experience: 7+ years of overall engineering experience, including at least 3 years specializing in CI/CD platform engineering or DevSecOps
• Jenkins & Groovy: Strong expertise in engineering advanced Jenkins Groovy Shared Libraries
• Advanced Python: Proven experience in building custom automation tools and scripts in Python (advanced JSON/YAML processing)
• Packaging & Containerization: Deep knowledge of package management (Maven, NPM, Python packaging) and hands-on exposure to Helm, Terraform, and container image metadata
• Software Supply Chain Security: Practical understanding of SLSA frameworks, SBOM (CycloneDX), and image digests
• Security Scanning Tools: Experience with SonarQube and Sonatype IQ for container scanning and SAST
• Performance Optimization: Proven track record in pipeline tuning (caching, parallelization, dependency pruning)
• Compliance Awareness: Strong awareness of security compliance and governance standard practices

Nice-to-Have:

• Artifact signing and attestations (Cosign, OCI registry standard)
• Publishing patterns for Terraform modules and Helm charts
• Experience with GitOps or release automation patterns
• Hands-on GCP or AWS cloud experience

Soft Skills:

• Precise and effective technical communicator
• Strong documentation discipline
• Ownership mindset with the ability to operate independently with minimal supervision