Devsecops Engineer

Hcltech; Teletrabalho; BRL 120.000 - 160.000; Tempo integral

Resumo da oferta

A global technology company in Joinville is seeking to fill a role focused on developing and maintaining Unified Device Identity Services while providing operational support for edge security infrastructure. Candidates should possess strong skills in cloud technologies like Golang and Kubernetes, along with knowledge of IAM and security frameworks. The position offers a flexible, remote-first environment, comprehensive benefits, and a commitment to professional growth.

Serviços

Virtual-first work environment

Comprehensive benefits

Learning and career development opportunities

Positive work environment

Qualificações

• Strong knowledge of cloud-based services running in service meshes is expected.
• Proven experience in cloud and on-prem security infrastructure.
• Hands-on expertise with service mesh architectures.
• Strong understanding of IAM, PKI, and attestation frameworks.

Responsabilidades

• Develop and maintain Unified Device Identity Services, including APIs and plugins.
• Provide tactical and operational support for edge security infrastructure.
• Build and manage Hardware Attestation Services.
• Implement identity issuance and attestation for workloads and agents.
• Enable secure application-level token verification.
• Support IAM initiatives including Auth IDP creation.
• Integrate deployments into managed CI/CD pipelines.
• Design and maintain scale, sanity, functional, and regression tests.
• Develop observability dashboards, alerts, and incident response workflows.
• Ensure compliance with patching guidelines for CVEs.

Conhecimentos

Golang

Python

PKI

ArgoCD

Helm

Kubernetes

Istio

Envoy

Zero Trust

SPIFFE

SPIRE

OIDC Flows

IAM

Cloud services

Service mesh architectures

Advanced English

Descrição da oferta de emprego

About HCLTech HCLTech is a global technology company, spread across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. We re powered by our people a global, diverse, multi-generational talent - representing 161 nationalities whose unique spark, perspective and boundless passion drive our culture of proactive value creation and problem-solving.

To learn more about how we can supercharge progress for you, visit

Your role and responsibilities

• Develop and maintain Unified Device Identity Services, including APIs and plugins.
• Provide tactical and operational support for edge security infrastructure (e.g., Web Application Firewalls, Rate Limiting Services).
• Build and manage Hardware Attestation Services, supporting workload attestation and policy enforcement.
• Implement identity issuance and attestation for workloads and agents using open-source tools like SPIFFE, SPIRE, and Keylime.
• Enable secure application-level token verification through JWT signing.
• Support IAM initiatives, including Auth IDP creation and PingFed decommissioning.
• Integrate deployments into managed CI / CD pipelines and repositories.
• Design and maintain scale, sanity, functional, and regression tests.
• Develop observability dashboards, alerts, and incident response workflows.
• Ensure compliance with patching guidelines for CVE and vulnerability management.

Skills and qualifications

• Languages & Tools: Golang, Python, PKI, ArgoCD, Helm, Kubernetes, Istio, Envoy
• Security & Identity: Zero Trust, SPIFFE, SPIRE, OIDC Flows
• Additional Expertise: Istio Rate Limit Service, AI-related topics (MCP, RAG)
• Strong knowledge of cloud-based services running in service meshes is expected.
• Proven experience in cloud and on-prem security infrastructure.
• Hands-on expertise with service mesh architectures.
• Strong understanding of IAM, PKI, and attestation frameworks.
• Ability to work in fast-paced environments and collaborate with SecOps teams.
• Advanded English
• Please, submit resumé in English.

Why choose us?

• We are one of the largest and fastest growing technology companies in the world, with offices in over 60 countries and 224,000 employees.
• Our company is extremely diverse with 165 nationalities represented.
• We offer the opportunity to work with colleagues from all over the world.
• We offer a virtual-first work environment, promoting a good integration between your work and personal life, with real flexibility.
• We are committed to your growth, offering learning and career development opportunities at all levels to help you find your unique brilliance. We offer comprehensive benefits to all employees.
• We are certified as a "Great Place to Work" and "Top Employer" in 17 countries, and recognized as a "Top Employer" in Brazil specifically, offering a positive work environment that values employee recognition and respect.

Equality & Opportunity for All

Representing 165 nationalities worldwide, we are proud to be an equal opportunity employer committed to providing equal employment opportunities to all applicants and employees without regard to race, religion, sex, color, age, national origin, pregnancy, sexual orientation, disability or genetic information, or any other protected classification, in accordance with federal, state and / or local laws.