Description
We are seeking a DevSecOps Engineer to help build and support secure, scalable software delivery practices.
Key Responsibilities
- Design and maintain secure CI/CD pipelines using GitHub Enterprise and related automation tools.
- Manage JFrog Artifactory, including repository governance, access controls, and integration with build and release processes.
- Implement Kubernetes security best practices, including RBAC, secrets management, network policies, and image security.
- Embed automated security controls into the delivery lifecycle, such as code, dependency, and container scanning.
- Partner with engineering, platform, and security teams to improve delivery speed, reliability, and risk reduction.
- Support infrastructure-as-code and configuration-as-code to improve consistency and auditability.
- Monitor and troubleshoot pipeline, deployment, and security issues across development and runtime environments.
- Create documentation, standards, and reusable patterns for secure software delivery.
Required Qualifications
- Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field, or equivalent experience.
- 3+ years of experience in DevOps, DevSecOps, platform engineering, or security engineering.
- Hands-on experience with Kubernetes administration and security controls.
- Experience with JFrog Artifactory in enterprise build and release environments.
- Experience with GitHub Enterprise, including repositories, pull requests, branch protection, and GitHub Actions.
- Understanding of CI/CD, infrastructure automation, and software supply chain security.
- Knowledge of containerization, vulnerability remediation, and scripting with Bash, Python, or similar tools.
- Strong problem-solving, communication, and cross-functional collaboration skills.
Preferred Qualifications
- Experience with policy-as-code, secrets management, and runtime security tools.
- Knowledge of artifact scanning, SBOM practices, and open-source dependency governance.
- Experience with Terraform, Helm, or similar infrastructure automation tools.
- Familiarity with compliance, audit controls, and secure engineering standards.
Benefits
- Health & Wellness: Health care coverage designed for the mind and body.
- Flexible Downtime: Generous time off helps keep you energized for your time on.
- Continuous Learning: Access a wealth of resources to grow your career and learn valuable new skills.
- Invest in Your Future: Secure your financial future through competitive pay, retirement planning, a continuing education program with a company-matched student loan contribution, and financial wellness programs.
- Family Friendly Perks: It’s not just about you. S&P Global has perks for your partners and little ones, too, with some best-in-class benefits for families.
- Beyond the Basics: From retail discounts to referral incentive awards,small perks can make a big difference.