Remote Cloud DevSecOps Engineer: Kubernetes & IAM

Jobs in JS; Arlington (VA); On-site; USD 130,000 - 175,000; Full time

Job summary

ECS is seeking a Cloud DevSecOps Engineer to operate remotely, leading cloud-native infrastructure, Kubernetes deployments, and IAM integrations with Keycloak and Okta. You will build secure CI/CD pipelines, manage security tooling, and ensure reliable, scalable systems across production and non-production environments.

The role requires deep experience in Terraform, Helm, container security, and enterprise-grade IAM. This is a remote position focused on modernization and secure cloud operations.

Qualifications

• US Citizenship with the ability to pass a Public Trust background check.
• Bachelor's degree in a relevant field.
• 10+ years of relevant work experience.
• 6+ years of systems engineering, DevOps, and cloud infrastructure experience.
• 4+ years of hands-on experience provisioning, operating, and troubleshooting containerized workloads in production Kubernetes clusters.
• 3+ years of IAM experience with Keycloak and Okta (OIDC, OAuth 2.0, SAML 2.0).
• Strong CI/CD experience with GitLab CI, GitHub Actions, or Jenkins and security scans.
• Proficiency with Terraform, Helm, and Kubernetes YAML manifests.

Responsibilities

• Architect, provision, configure, and maintain production-grade Kubernetes cluster environments.
• Deploy and administer Keycloak in Kubernetes, federating to Okta via SAML 2.0 and OIDC.
• Configure Keycloak realm roles, client scopes, and token exchange policies.
• Design and maintain end-to-end CI/CD pipelines with automated scanning and zero-downtime deployments.
• Implement platform security controls: Ingress, TLS, network policies, and image scanning.
• Automate secrets management across environments using Vault or AWS Secrets Manager.

Skills

Cloud automation

Security mindset

Automation

IaC proficiency

Scripting

Education

Bachelor's degree

Tools

Kubernetes

Docker

Helm

Keycloak

Okta

Terraform

CI/CD tools

Trivy

Vault / Secrets Manager

Job description

ECS is seeking a Cloud DevSecOps Engineer to operate remotely, leading cloud-native infrastructure, Kubernetes deployments, and IAM integrations with Keycloak and Okta. You will build secure CI/CD pipelines, manage security tooling, and ensure reliable, scalable systems across production and non-production environments.

The role requires deep experience in Terraform, Helm, container security, and enterprise-grade IAM. This is a remote position focused on modernization and secure cloud operations.