Devsecops Engineer / Azure / Terraform / Cloudformation / Docker / Kubernetes

Summary: The role is for a DevSecOps Engineer on a 6-month contract, with potential extensions, focusing on implementing security controls within an Azure platform. The position is remote and requires SC clearance. The ideal candidate will have expertise in CI/CD tools, infrastructure as code, and security regulations. This role is classified as inside IR35.

Key Responsibilities:

• Architecting, designing and implementing security controls into an Azure Platform
• Utilizing CI/CD tools such as Jenkins, GitLab CI, and GitHub Actions
• Implementing Infrastructure as Code using Terraform and CloudFormation
• Managing containerization with Docker and Kubernetes
• Ensuring compliance with security regulations and industry standards like PCI DSS, HIPAA, and GDPR
• Applying secure coding practices, authentication, authorization, cryptography, network security, and vulnerability management
• Utilizing scripting languages such as Bash, Python, and PowerShell
• Conducting security assessments with tools like Nessus and/or Qualys
• Implementing Fortify and/or SonarQube, and penetration testing methodologies

Key Skills:

• Expertise in Azure platform security controls
• Strong knowledge of CI/CD tools; Jenkins, GitLab CI, GitHub Actions
• Experience with Infrastructure as Code; Terraform, CloudFormation
• Proficiency in containerization; Docker, Kubernetes
• Understanding of security regulations and industry standards; PCI DSS, HIPAA, GDPR
• Knowledge of secure coding practices, authentication, authorization, cryptography, network security, and vulnerability management
• Proficiency in Bash, Python, PowerShell
• Experience with Nessus and/or Qualys
• Familiarity with Fortify and/or SonarQube, and penetration testing methodologies

Salary (Rate): undetermined

City: London

Country: UK

Working Arrangements: remote

IR35 Status: inside IR35

Seniority Level: undetermined

Industry: IT