Role Summary
Build and standardize enterprise CI/CD and platform automation using Azure DevOps Server, integrating security scanning, artifact management, IaC, GitOps delivery to OpenShift/Kubernetes, and monitoring readiness.
Key Responsibilities
- Configure project boards to track security vulnerabilities as work items, ensuring compliance is part of the sprint backlog and SDLC
- Manage secure Git repositories, enforce branch policies (e.g., mandatory pull request reviews), and monitor for secret leakage
- Implement reusable pipeline templates and shared libraries in Azure DevOps Server
- Integrate JFrog Artifactory for NuGet/Maven/NPM/Gradle/Docker artifacts
- Embed Fortify SAST/DAST scanning stages and policy-based gating
- Implement secrets integration using HashiCorp Vault and access patterns aligned with SecurEnvoy MFA
- Expertise in containerization and orchestration technologies, specifically Kubernetes and Docker
- Provision environments using Terraform (IaC) and configuration via Ansible
- Familiarity with scripting/programming languages (e.g., Python, Bash, PowerShell) for automation tasks
- Enable GitOps deployment using Argo CD to OpenShift/Kubernetes
- Integrate monitoring hooks (AppDynamics/BMC/Azure Monitoring) and contribute to runbooks
Requirements
Required Experience
6-10+ years DevOps/SRE experience with enterprise CI/CD. Government/regulatory sector experience is a plus. Strong hands-on production delivery exposure (not only labs).
Technical Skills
CI/CD pipeline engineering, agent pools, branching strategies, secure pipeline patterns, containerization (Docker), K8s/OpenShift, IAC, Linux, and scripting, Integrate with Open Text Security tools, Manage 3rd party Libraries, Integrate with Testing Automation tools
Soft Skills
Cross-team collaboration with developers, security, and QA; coaching mindset; strong documentation and ownership.
Core Skills / Tooling
Azure DevOps Server, JFrog Artifactory, Fortify SCA, HashiCorp Vault, Terraform, Ansible, OpenShift/Kubernetes, Argo CD, Sigstore/Envoy MFA (plus), and monitoring (AppDynamics/BMC/Azure Monitoring).
