Devsecops Engineer || Remote || W2 & C2C

Responsibilities

• Lead and own the end-to-end deployment strategy across the bank’s hybrid public cloud and on-premises environments.
• Design, build, and maintain CI/CD pipelines to enable repeatable, version-controlled releases, including rollback mechanisms and change management.
• Package and deploy platform components using containerization and orchestration technologies (e.g., Docker, Kubernetes, Helm), as well as VM-based approaches where necessary.
• Develop and manage infrastructure-as-code (IaC) solutions and automation using tools such as Terraform and CloudFormation for provisioning environments, networking, and configuration.
• Implement end-to-end release orchestration, including disaster recovery (DR) capabilities.
• Implement and enforce secure configuration management practices, including TLS, secrets management, certificate lifecycle management, RBAC/IAM, and least-privilege access controls.
• Establish and maintain observability frameworks, including metrics, logging, distributed tracing, alerting, dashboards, and on-call runbooks.
• Modernize and refactor existing CI/CD shared libraries into tool-agnostic, reusable components.
• Define and implement reliability best practices, including backup and recovery, disaster recovery planning, capacity management, performance optimization, and incident response.
• Develop and maintain comprehensive deployment documentation for internal stakeholders.
• Collaborate effectively with both internal teams and external partners to ensure successful delivery and operations.

Requirements & Qualifications

• Minimum 5+ years of experience in the IT field or in a related discipline
• Proven experience owning end-to-end delivery lifecycle from development through production (build, release, rollback, and monitoring).
• Strong proficiency in scripting languages such as Python and Bash.
• Experience delivering multi-service applications (Java, Python, Node.js) with standardized CI/CD processes, versioning, and rollback capabilities.
• Ability to read and debug application code to resolve issues related to build, configuration, and runtime environments.
• Hands-on experience deploying applications on container orchestration platforms (e.g., EKS, OpenShift).
• Practical experience with both containerized and VM-based deployment models.
• Solid understanding of networking fundamentals, including DNS, TLS, reverse proxies, load balancing, and firewall configurations.
• Experience with CI/CD tools (e.g., Jenkins, GitHub Actions, Harness) and automated release processes.
• Strong experience in automating System Recovery process and DR processes.
• Experience with Harness templates, pipelines and platform management.
• Expertise in infrastructure-as-code and configuration management tools (e.g., Azure ARM, Terraform, Ansible, CloudFormation).
• Strong knowledge of security best practices, including secrets management, certificate handling, IAM/RBAC policies, patching, and auditing.
• Experience building observability solutions and operational runbooks (logs, metrics, alerts, incident management).
• Ability to design and operate within restricted network environments (e.g., proxy configurations, no-egress setups, air-gapped systems).
• Excellent analytical, troubleshooting, and problem-solving skills.