Senior Devops Engineer

Role Summary

Build and standardize enterprise CI/CD and platform automation using Azure DevOps Server, integrating security scanning, artifact management, IaC, GitOps delivery to OpenShift/Kubernetes, and monitoring readiness.

Key Responsibilities

• Configure project boards to track security vulnerabilities as work items, ensuring compliance is part of the sprint backlog and SDLC.
• Manage secure Git repositories, enforce branch policies (e.g., mandatory pull request reviews), and monitor for secret leakage.
• Implement reusable pipeline templates and shared libraries in Azure DevOps Server.
• Integrate JFrog Artifactory for NuGet/Maven/NPM/Gradle/Docker artifacts.
• Embed Fortify SAST/DAST scanning stages and policy-based gating.
• Implement secrets integration using HashiCorp Vault and access patterns aligned with SecurEnvoy MFA.
• Expertise in containerization and orchestration technologies, specifically Kubernetes and Docker.
• Provision environments using Terraform (IaC) and configuration via Ansible.
• Familiarity with scripting/programming languages (e.g., Python, Bash, PowerShell) for automation tasks.
• Enable GitOps deployment using Argo CD to OpenShift/Kubernetes.
• Integrate monitoring hooks (AppDynamics/BMC/Azure Monitoring) and contribute to runbooks.

Requirements

Required Experience

6–10+ years DevOps/SRE experience with enterprise CI/CD. Government/regulatory sector experience is a plus. Strong hands-on production delivery exposure (not only labs).

Technical Skills

CI/CD pipeline engineering, agent pools, branching strategies, secure pipeline patterns, containerization (Docker), K8s/OpenShift, IAC, Linux, and scripting, Integrate with Open Text Security tools, Manage 3rd party Libraries, Integrate with Testing Automation tools

Soft Skills

Cross-team collaboration with developers, security, and QA; coaching mindset; strong documentation and ownership.

Core Skills / Tooling

Azure DevOps Server, JFrog Artifactory, Fortify SCA, HashiCorp Vault, Terraform, Ansible, OpenShift/Kubernetes, Argo CD, Sigstore/Envoy MFA (plus), and monitoring (AppDynamics/BMC/Azure Monitoring).