DevSecOps / Supply Chain Engineer

Job Summary: We are looking for a DevSecOps Engineer to implement secure CI/CD pipelines, identity management, Kubernetes security, and software supply-chain controls.

Key Responsibilities:

• Implement Keycloak, RBAC/ABAC, OpenBao/Vault, and secrets management.
• Develop secure CI/CD pipelines using GitLab and Argo CD.
• Configure Kubernetes security policies using Kyverno/OPA.
• Implement image signing, SBOM generation, and vulnerability scanning.
• Manage Harbor, Pulp, and offline artifact delivery in air-gapped environments.

Required Skills:

• Kubernetes security, GitLab CI/CD, and Argo CD.
• Keycloak/OIDC, OpenBao/Vault, and Kyverno/OPA.
• Cosign/Sigstore, Trivy/Syft, SBOM, and supply-chain security.
• Experience with air-gapped artifact management.

Work Location: In person