DevSecOps Engineer - GCP, CI/CD & Security

Smart IT Frame LLC; Reston (VA); Presencial; USD 110.000 - 170.000; Jornada completa

Descripción de la vacante

Smart IT Frame LLC is seeking a skilled DevSecOps Engineer to design secure GCP infrastructure, automate CI/CD pipelines, and enforce cloud security practices. You will implement and maintain pipelines with Jenkins, GitLab CI/CD, or GitHub Actions, and manage IAM, secrets, and compliance across environments.

You will collaborate with development and operations teams to embed DevSecOps best practices, integrate vulnerability scanning, and ensure monitoring and logging standards are met across the

Formación

• Hands-on experience with GCP services (GKE, Cloud Build, IAM, Artifact Registry).
• Strong experience with Kubernetes, Terraform, and CI/CD pipelines.
• Scripting skills in Python, Bash, or similar languages.
• Understanding of cloud security, networking, and compliance best practices.

Responsabilidades

• Design and manage secure cloud infrastructure on GCP.
• Implement and maintain CI/CD pipelines using Jenkins, GitLab CI/CD, or GitHub Actions.
• Integrate security scanning tools for SAST, DAST, dependency, and container vulnerabilities.
• Manage IAM, service accounts, secrets, and cloud security policies.
• Implement monitoring, logging, compliance, and vulnerability management practices.
• Collaborate with development and operations teams to apply DevSecOps best practices.

Conocimientos

GCP

CI/CD automation

Cloud security

Infrastructure as code

Herramientas

Jenkins

GitLab CI/CD

GitHub Actions

Terraform

Kubernetes

Python

Bash

Descripción del empleo

Smart IT Frame LLC is seeking a skilled DevSecOps Engineer to design secure GCP infrastructure, automate CI/CD pipelines, and enforce cloud security practices. You will implement and maintain pipelines with Jenkins, GitLab CI/CD, or GitHub Actions, and manage IAM, secrets, and compliance across environments.

You will collaborate with development and operations teams to embed DevSecOps best practices, integrate vulnerability scanning, and ensure monitoring and logging standards are met across the