Role Summary
Build and standardize enterprise CI/CD and platform automation using Azure DevOps Server, integrating security scanning, artifact management, IaC, GitOps delivery to OpenShift/Kubernetes, and monitoring readiness.
Key Responsibilities
· Configure project boards to track security vulnerabilities as work items, ensuring compliance is part of the sprint backlog and SDLC.
· Manage secure Git repositories, enforce branch policies (e.g., mandatory pull request reviews), and monitor for secret leakage.
· Implement reusable pipeline templates and shared libraries in Azure DevOps Server.
· Integrate JFrog Artifactory for NuGet/Maven/NPM/Gradle/Docker artifacts.
· Embed Fortify SAST/DAST scanning stages and policy-based gating.
· Implement secrets integration using HashiCorp Vault and access patterns aligned with SecurEnvoy MFA.
· Expertise in containerization and orchestration technologies, specifically Kubernetes and Docker.
· Provision environments using Terraform (IaC) and configuration via Ansible.
· Familiarity with scripting/programming languages (e.g., Python, Bash, PowerShell) for automation tasks.
· Enable GitOps deployment using Argo CD to OpenShift/Kubernetes.
· Integrate monitoring hooks (AppDynamics/BMC/Azure Monitoring) and contribute to runbooks.
Requirements
Required Experience
6–10+ years DevOps/SRE experience with enterprise CI/CD. Government/regulatory sector experience is a plus. Strong hands-on production delivery exposure (not only labs).
Technical Skills
CI/CD pipeline engineering, agent pools, branching strategies, secure pipeline patterns, containerization (Docker), K8s/OpenShift, IAC, Linux, and scripting, Integrate with Open Text Security tools, Manage 3rd party Libraries, Integrate with Testing Automation tools
Soft Skills
Cross-team collaboration with developers, security, and QA; coaching mindset; strong documentation and ownership.
Core Skills / Tooling
Azure DevOps Server, JFrog Artifactory, Fortify SCA, HashiCorp Vault, Terraform, Ansible, OpenShift/Kubernetes, Argo CD, Sigstore/Envoy MFA (plus), and monitoring (AppDynamics/BMC/Azure Monitoring).
