DevSecOps Engineer - GCP, CI/CD & Security

Smart IT Frame LLC; Reston (VA); Sur place; USD 110 000 - 170 000; Plein temps

Résumé du poste

Smart IT Frame LLC is seeking a skilled DevSecOps Engineer to design secure GCP infrastructure, automate CI/CD pipelines, and enforce cloud security practices. You will implement and maintain pipelines with Jenkins, GitLab CI/CD, or GitHub Actions, and manage IAM, secrets, and compliance across environments.

You will collaborate with development and operations teams to embed DevSecOps best practices, integrate vulnerability scanning, and ensure monitoring and logging standards are met across the

Qualifications

• Hands-on experience with GCP services (GKE, Cloud Build, IAM, Artifact Registry).
• Strong experience with Kubernetes, Terraform, and CI/CD pipelines.
• Scripting skills in Python, Bash, or similar languages.
• Understanding of cloud security, networking, and compliance best practices.

Responsabilités

• Design and manage secure cloud infrastructure on GCP.
• Implement and maintain CI/CD pipelines using Jenkins, GitLab CI/CD, or GitHub Actions.
• Integrate security scanning tools for SAST, DAST, dependency, and container vulnerabilities.
• Manage IAM, service accounts, secrets, and cloud security policies.
• Implement monitoring, logging, compliance, and vulnerability management practices.
• Collaborate with development and operations teams to apply DevSecOps best practices.

Connaissances

GCP

CI/CD automation

Cloud security

Infrastructure as code

Outils

Jenkins

GitLab CI/CD

GitHub Actions

Terraform

Kubernetes

Python

Bash

Description du poste

Smart IT Frame LLC is seeking a skilled DevSecOps Engineer to design secure GCP infrastructure, automate CI/CD pipelines, and enforce cloud security practices. You will implement and maintain pipelines with Jenkins, GitLab CI/CD, or GitHub Actions, and manage IAM, secrets, and compliance across environments.

You will collaborate with development and operations teams to embed DevSecOps best practices, integrate vulnerability scanning, and ensure monitoring and logging standards are met across the