Devsecops Engineer

Hcltech; Teletrabalho; BRL 150.000 - 200.000; Tempo integral

Resumo da oferta

A global technology company is seeking candidates to develop and maintain identity services, support edge security infrastructure, and implement cloud security measures. The ideal candidate will have strong skills in Golang, Python, Kubernetes, and relevant security frameworks, alongside advanced English proficiency. This position offers a virtual-first work environment with opportunities for career growth and a commitment to employee recognition. Join a diverse team committed to fostering innovation and collaboration.

Serviços

Comprehensive benefits

Career development opportunities

Flexible work environment

Global team collaboration

Qualificações

• Strong knowledge of cloud-based services running in service meshes is expected.
• Proven experience in cloud and on-prem security infrastructure.
• Hands-on expertise with service mesh architectures.
• Strong understanding of IAM, PKI, and attestation frameworks.
• Ability to work in fast-paced environments and collaborate with SecOps teams.
• Please submit resumé in English.

Responsabilidades

• Develop and maintain Unified Device Identity Services, including APIs and plugins.
• Provide tactical and operational support for edge security infrastructure.
• Build and manage Hardware Attestation Services, supporting workload attestation.
• Implement identity issuance and attestation for workloads using open-source tools.
• Enable secure application-level token verification through JWT signing.
• Support IAM initiatives, including Auth IDP creation.
• Integrate deployments into managed CI / CD pipelines.
• Design and maintain scale, sanity, functional, and regression tests.
• Develop observability dashboards, alerts, and incident response workflows.
• Ensure compliance with patching guidelines.

Conhecimentos

Golang

Python

PKI

ArgoCD

Helm

Kubernetes

Istio

Envoy

Zero Trust

SPIFFE

SPIRE

OIDC Flows

Service mesh architectures

IAM

Incident response workflows

Advanced English

Descrição da oferta de emprego

About HCLTech HCLTech is a global technology company, spread across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. We re powered by our people a global, diverse, multi-generational talent - representing 161 nationalities whose unique spark, perspective and boundless passion drive our culture of proactive value creation and problem-solving.

To learn more about how we can supercharge progress for you, visit

Your role and responsibilities

• Develop and maintain Unified Device Identity Services, including APIs and plugins.
• Provide tactical and operational support for edge security infrastructure (e.g., Web Application Firewalls, Rate Limiting Services).
• Build and manage Hardware Attestation Services, supporting workload attestation and policy enforcement.
• Implement identity issuance and attestation for workloads and agents using open-source tools like SPIFFE, SPIRE, and Keylime.
• Enable secure application-level token verification through JWT signing.
• Support IAM initiatives, including Auth IDP creation and PingFed decommissioning.
• Integrate deployments into managed CI / CD pipelines and repositories.
• Design and maintain scale, sanity, functional, and regression tests.
• Develop observability dashboards, alerts, and incident response workflows.
• Ensure compliance with patching guidelines for CVE and vulnerability management.

Skills and qualifications

• Languages & Tools: Golang, Python, PKI, ArgoCD, Helm, Kubernetes, Istio, Envoy
• Security & Identity: Zero Trust, SPIFFE, SPIRE, OIDC Flows
• Additional Expertise: Istio Rate Limit Service, AI-related topics (MCP, RAG)
• Strong knowledge of cloud-based services running in service meshes is expected.
• Proven experience in cloud and on-prem security infrastructure.
• Hands-on expertise with service mesh architectures.
• Strong understanding of IAM, PKI, and attestation frameworks.
• Ability to work in fast-paced environments and collaborate with SecOps teams.
• Advanded English
• Please, submit resumé in English.

Why choose us?

• We are one of the largest and fastest growing technology companies in the world, with offices in over 60 countries and 224,000 employees.
• Our company is extremely diverse with 165 nationalities represented.
• We offer the opportunity to work with colleagues from all over the world.
• We offer a virtual-first work environment, promoting a good integration between your work and personal life, with real flexibility.
• We are committed to your growth, offering learning and career development opportunities at all levels to help you find your unique brilliance. We offer comprehensive benefits to all employees.
• We are certified as a "Great Place to Work" and "Top Employer" in 17 countries, and recognized as a "Top Employer" in Brazil specifically, offering a positive work environment that values employee recognition and respect.

Equality & Opportunity for All

Representing 165 nationalities worldwide, we are proud to be an equal opportunity employer committed to providing equal employment opportunities to all applicants and employees without regard to race, religion, sex, color, age, national origin, pregnancy, sexual orientation, disability or genetic information, or any other protected classification, in accordance with federal, state and / or local laws.