Job Title: Devsecops Engineer
Experience: 8+
Location: Phoenix, AZ
Responsibilities
· Lead and own the end-to-end deployment strategy across the bank’s hybrid public cloud and on-premises environments.
· Design, build, and maintain CI/CD pipelines to enable repeatable, version-controlled releases, including rollback mechanisms and change management.
· Package and deploy platform components using containerization and orchestration technologies (e.g., Docker, Kubernetes, Helm), as well as VM-based approaches where necessary.
· Develop and manage infrastructure-as-code (IaC) solutions and automation using tools such as Terraform and CloudFormation for provisioning environments, networking, and configuration.
· Implement end-to-end release orchestration, including disaster recovery (DR) capabilities.
· Implement and enforce secure configuration management practices, including TLS, secrets management, certificate lifecycle management, RBAC/IAM, and least-privilege access controls.
· Establish and maintain observability frameworks, including metrics, logging, distributed tracing, alerting, dashboards, and on-call runbooks.
· Modernize and refactor existing CI/CD shared libraries into tool-agnostic, reusable components.
· Define and implement reliability best practices, including backup and recovery, disaster recovery planning, capacity management, performance optimization, and incident response.
· Develop and maintain comprehensive deployment documentation for internal stakeholders.
· Collaborate effectively with both internal teams and external partners to ensure successful delivery and operations.
Requirements & Qualifications
· Minimum 5+ years of experience in the IT field or in a related discipline
· Proven experience owning end-to-end delivery lifecycle from development through production (build, release, rollback, and monitoring).
· Strong proficiency in scripting languages such as Python and Bash.
· Experience delivering multi-service applications (Java, Python, Node.js) with standardized CI/CD processes, versioning, and rollback capabilities.
· Ability to read and debug application code to resolve issues related to build, configuration, and runtime environments.
· Hands-on experience deploying applications on container orchestration platforms (e.g., EKS, OpenShift).
· Practical experience with both containerized and VM-based deployment models.
· Solid understanding of networking fundamentals, including DNS, TLS, reverse proxies, load balancing, and firewall configurations.
· Experience with CI/CD tools (e.g., Jenkins, GitHub Actions, Harness) and automated release processes.
· Strong experience in automating System Recovery process and DR processes.
· Experience with Harness templates, pipelines and platform management.
· Expertise in infrastructure-as-code and configuration management tools (e.g., Azure ARM, Terraform, Ansible, CloudFormation).
· Strong knowledge of security best practices, including secrets management, certificate handling, IAM/RBAC policies, patching, and auditing.
· Experience building observability solutions and operational runbooks (logs, metrics, alerts, incident management).
· Ability to design and operate within restricted network environments (e.g., proxy configurations, no-egress setups, air-gapped systems).
Excellent analytical, troubleshooting, and problem-solving skills.
