DevOps / DevSecOps Engineer / GCP : W2 Role

HARAMAIN SYSTEMS INC.; Saint Paul (MN); Hybrid; USD 120,000 - 170,000; Full time

Job summary

HARAMAIN SYSTEMS INC. is seeking a DevSecOps Engineer with Google Cloud Platform expertise to design and secure ITAR-compliant infrastructure. The role focuses on building secure CI/CD pipelines, IaC, and containerized workloads on GKE, with emphasis on compliance and risk management.

The position is in Bloomington, MN, offering a hybrid work arrangement and a long-term contract. Ideal candidates have 5+ years in DevOps/DevSecOps, strong GCP experience, and solid knowledge of security practices

Qualifications

• 5 years of experience in DevOps, Cloud Engineering, or DevSecOps roles.
• Hands-on experience with Google Cloud Platform (GCP).
• Strong experience with CI/CD pipeline development.
• Experience with Infrastructure as Code.
• Experience with containerization and Kubernetes.
• Knowledge of secure software development practices.
• Experience with cloud security frameworks and compliance requirements.

Responsibilities

• Design, implement, and maintain secure cloud infrastructure in Google Cloud Platform (GCP).
• Implement security controls, monitoring, and compliance automation aligned with ITAR, NIST, CMMC and corporate security standards.
• Configure and maintain IAM policies, network segmentation, and secure access controls.

Skills

DevOps experience

GCP

CI/CD development

Infrastructure as Code

Containerization Kubernetes

Secure SDLC

Cloud security & compliance

Tools

Jenkins

GitLab CI/CD

GitHub Actions

Cloud Build

Job description

DevSecOps Engineer (Google Cloud Platform — ITAR Environment) Location: Bloomington, MN. (Hybrid) Long term contract Required Qualifications

• 5 years of experience in DevOps, Cloud Engineering, or DevSecOps roles.


• Hands-on experience with Google Cloud Platform (GCP).


• Strong experience with CI/CD pipeline development.


• Experience with Infrastructure as Code


• Experience with containerization and Kubernetes.


• Knowledge of secure software development practices.


• Experience with cloud security frameworks and compliance requirements.

Key Responsibilities Cloud & Infrastructure Security

• Design, implement, and maintain secure cloud infrastructure in Google Cloud Platform (GCP).


• Implement security controls, monitoring, and compliance automation aligned with ITAR, NIST, CMMC and corporate security standards.


• Configure and maintain IAM policies, network segmentation, and secure access controls.

DevSecOps & CI/CD

• Build and maintain secure CI/CD pipelines using tools such as:


• Jenkins


• GitLab CI/CD


• GitHub Actions


• Cloud Build


• Integrate automated security scanning into pipelines including:


• SAST


• DAST


• container vulnerability scanning


• dependency scanning


• Automate infrastructure deployments using Infrastructure as Code (IaC) tools.

Container & Platform Security

• Secure containerized workloads running on GKE (Google Kubernetes Engine).


• Implement container security best practices including:


• image scanning


• runtime protection


• secrets management


• Maintain Kubernetes security configurations and policies.