DevSecOps Engineer

Smart IT Frame LLC; Reston (VA); On-site; USD 110,000 - 170,000; Full time

Job summary

Smart IT Frame LLC is seeking a skilled DevSecOps Engineer to design secure GCP infrastructure, automate CI/CD pipelines, and enforce cloud security practices. You will implement and maintain pipelines with Jenkins, GitLab CI/CD, or GitHub Actions, and manage IAM, secrets, and compliance across environments.

You will collaborate with development and operations teams to embed DevSecOps best practices, integrate vulnerability scanning, and ensure monitoring and logging standards are met across the

Qualifications

• Hands-on experience with GCP services (GKE, Cloud Build, IAM, Artifact Registry).
• Strong experience with Kubernetes, Terraform, and CI/CD pipelines.
• Scripting skills in Python, Bash, or similar languages.
• Understanding of cloud security, networking, and compliance best practices.

Responsibilities

• Design and manage secure cloud infrastructure on GCP.
• Implement and maintain CI/CD pipelines using Jenkins, GitLab CI/CD, or GitHub Actions.
• Integrate security scanning tools for SAST, DAST, dependency, and container vulnerabilities.
• Manage IAM, service accounts, secrets, and cloud security policies.
• Implement monitoring, logging, compliance, and vulnerability management practices.
• Collaborate with development and operations teams to apply DevSecOps best practices.

Skills

GCP

CI/CD automation

Cloud security

Infrastructure as code

Tools

Jenkins

GitLab CI/CD

GitHub Actions

Terraform

Kubernetes

Python

Bash

Job description

We are looking for a skilled DevSecOps Engineer with experience in GCP, CI/CD automation, cloud security, and infrastructure as code to build, secure, and maintain scalable cloud environments.

Key Responsibilities:

• Design and manage secure cloud infrastructure on GCP.
• Implement and maintain CI/CD pipelines using tools such as Jenkins, GitLab CI/CD, or GitHub Actions.
• Integrate security scanning tools for SAST, DAST, dependency, and container vulnerability scanning.
• Manage IAM, service accounts, secrets, and cloud security policies.
• Implement monitoring, logging, compliance, and vulnerability management practices.
• Collaborate with development and operations teams to implement DevSecOps best practices.

Required Skills:

• Hands-on experience with GCP services such as GKE, Cloud Build, Cloud Logging, IAM, and Artifact Registry.
• Strong experience in Kubernetes, Terraform, and CI/CD pipelines.
• Knowledge of scripting using Python, Bash, or similar languages.
• Understanding of cloud security, networking, and compliance best practices