Job description
Job Summary
Our client is seeking a highly skilled DevSecOps Engineer to design, build, and maintain secure and scalable CI/CD pipelines for application and database deployments. This is a hybrid role requiring 2-3 days onsite in NJ.
Key Responsibilities
- Design and maintain CI/CD pipelines for applications and databases using tools such as Azure DevOps, Jenkins, Smart City, GitLab CI, or GitHub Actions.
- Automate infrastructure provisioning and configuration management using tools like Terraform, Ansible, or Helm.
- Integrate automated testing frameworks (junit, Slenium etc) and code coverage tools (e.g., SonarQube etc).
- Embed static and dynamic security scanning tools (SAST/DAST) into pipelines.
- Implement and monitor database CI/CD workflows for version-controlled schema migrations.
- Ensure secure secrets management using Azure Key Vault.
- Continuously monitor pipeline performance and enforce compliance, code quality, and security policies.
- Collaborate with application and database developers to optimize release strategies and rollback mechanisms.
- Conduct incident response drills, threat modeling, and vulnerability assessments within CI/CD contexts.
- Document DevSecOps processes and provide training to development teams on security and best practices.
Required Skills & Experience
- Proven experience with DevSecOps practices and tools.
- Proficiency in CI/CD platforms like Azure DevOps, Smart City, GitHub Actions, GitLab CI, or Jenkins.
- Solid understanding of cloud platforms (Azure).
- Experience with IaC tools like Terraform, CloudFormation.
- Strong background in code testing frameworks and code quality tooling (JUnit, SonarQube, etc.).
- Hands-on with database CI/CD, schema versioning, and database migration practices.
- Experience with containerization (Docker) and orchestration (Kubernetes, AKS).
- Familiarity with secure coding principles and compliance standards.
- Strong scripting skills in Python, Bash.
- Minimum 12 years of experience required.
- Note: No H1B Transfer Candidates OR OPT/CPT. This is a DevSecOps Role and not DevOps.
Preferred Qualifications
- Certifications: Azure DevOps Engineer.
- Experience with monitoring and observability tools.
- Experience in multi-cloud or hybrid-cloud DevSecOps pipelines.
- Familiarity with data masking, auditing, and encryption in the database CI/CD context.
Location & Work Arrangement
- Location: NJ
- Work Arrangement: Hybrid (2-3 days onsite)
- Flexible work from home options available.