DevSecOps Engineer

As a DevSecOps Engineer at our company, you will be responsible for building and managing our Internal Developer Portal (IDP) to facilitate developer self-service, compliance, automation, and best practices. **Key Responsibilities:** - Architect, design, deploy, and maintain the Internal Developer Portal to enable dev teams to self-provision infrastructure and applications. - Define and implement golden paths (reusable templates) for infrastructure and application deployment with a focus on security, compliance, and cloud best practices. - Integrate the portal with CI/CD pipelines, cloud infrastructure (such as Kubernetes, AWS/Azure/GCP), and developer tooling. - Implement DevSecOps practices including security scanning, vulnerability management, and policy-as-code. - Continuously enhance the developer experience by improving usability, speed, and support. - Evaluate, adopt, or develop tools and automation to streamline workflows. - Provide ongoing troubleshooting and support for the IDP and associated infrastructure. - Create and maintain comprehensive documentation and guidelines for best practices. **Qualifications Required:** - Proven experience in a DevSecOps or platform engineering role. - Experience in designing and managing Internal Developer Portals or similar self-service platforms. - Strong skills in cloud-native technologies such as Kubernetes, Docker, and services from AWS/Azure/GCP. - Expertise in CI/CD tools like Jenkins, GitHub Actions, Argo CD, GitLab CI, etc. - Proficiency in Infrastructure as Code tools like Terraform, Ansible, Pulumi, etc. - Deep understanding of security in cloud environments, pipeline security, secrets management, vulnerability scanning, and compliance. - Excellent communication and collaboration skills with both development and operations teams. **Preferred Skills:** - Experience with Port.io or similar IDP/developer self-service platforms. - Familiarity with templating tools for app/infrastructure deployment. - Experience in building software catalogs or reusable component libraries. - Proficiency in scripting languages such as Python, Go, and Bash. - Knowledge of security scanning and remediation tools. This is a contract position.,