DevSecOps

Our company has a client that is seeking a DevSecOps in New York NY.

Essential Functions:

• Advocates for the application teams Cybersecurity DevSecOps and Agile engineering procedures quality engineering practices and advanced requirement capturing techniques for improving endtoend secure delivery practices
• Design and implement strategies for collaboration code infrastructure source control security compliance continuous integration testing delivery monitoring and feedback
• Manage GitHub Enterprise Pipelines with a heavy emphasis on custom flows and actions as well as Azure DevOps projects (minor); This will include implementing automation tools and frameworks for CI/CD pipelines
• Responsible for daytoday collaboration with the different application/asset teams to ensure successful implementation of secure coding practices and integration of secure application and design processes across the company; Supports the Secure Systems Development Lifecycle (SSDLC) including functional and nonfunctional cybersecurity requirements
• Monitor systems identify performance bottlenecks and implement solutions in a proactive manner
• Works with the application Infrastructure architect to complete security/infrastructure questionnaires
• Develop and maintain design and troubleshooting documentation
• Provide training and support to internal teams peers and stakeholders
• Plan DR measures and maintain data storage security in Azure
• Acts as the DevOps Champion for the application/cyber/Portfolio teams

Required Skills : * Minimum of 6 years of combined experience in DevOps/DevSecOps engineering and Software Engineering * Background in Kubernetes (AKS) and Linux is a requirement * Expertise in Azure cloud services is a requirement (must be a senior) * Understanding of network architectures and services (e.g. VPN routing firewall NSGs etc.) * Knowledge of Source Code Management concepts (e.g. code lines branching merging integration versioning); Proficiency in using Git for version control is a must * Ability to translate traditional SDLC approach (plan code build test release deploy and monitor) to the phases of agile development when writing software to automate security related tasks * Azure certifications (e.g. Azure DevOps engineer expert and Azure Administrator Associate) is a plus * Knowledge of CI/CD Pipeline creation in Azure DevOps is a plus