Senior DevSecOps Engineer

Senior DevSecOps Engineer – OpenStack

Remote

Role Purpose

Designs, automates, and secures infrastructure and deployment pipelines, combining solid engineering fundamentals with a strong security mindset – building systems that are fast, reproducible, and trustworthy from the first line of code to production deployment on OpenStack-based sovereign cloud environments.

Key Responsibilities

• Develop, maintain, and improve CI/CD pipelines to ensure secure, repeatable software delivery.
• Implement and manage Infrastructure as Code using Terraform, Ansible, and scripting (Bash, Python).
• Integrate security and compliance controls into build and release workflows, emphasizing continuous validation and traceability.
• Collaborate with developers, platform engineers, and security teams to improve reliability, performance, and observability.
• Support automation of infrastructure provisioning, configuration management, and policy enforcement across cloud and on-premises environments.
• Monitor, troubleshoot, and optimize deployments using telemetry and event-driven tooling (Prometheus, Splunk, or ELK).
• Participate in threat modeling, patch management, and hardening of systems, containers, and CI/CD components.
• Contribute to knowledge sharing and documentation of DevSecOps patterns and best practices.

Required Skills & Experience

• 6+ years of proven experience with Terraform, Ansible, and Bash scripting in production environments.
• Experience with cloud platforms (OpenStack) and containerized workloads (Kubernetes, Docker).
• Working knowledge of CI/CD tools such as GitLab CI, Concourse, or GitHub Actions.
• Understanding of secure configuration management, least privilege, and identity management concepts.
• Experience troubleshooting complex system issues across application, network, and OS layers.
• Solid grasp of Linux systems administration and infrastructure fundamentals.
• Excellent collaboration and documentation skills with an emphasis on automation and simplicity.

Nice to Have

• Familiarity with logging and observability tools (Splunk, Vector, or Kafka).
• Knowledge of Vault, KMS, or secret management best practices.
• Understanding of compliance frameworks (FedRAMP, ISO 27001, CIS, or NIST 800-53).
• Awareness of FIPS-compliant cryptography or secure enclave deployments.

Regards,

Gaurav Tripathi

Sr Associate – Talent Acquisition

KAnand Corporation

Phone:

Office- Ext 443

Email: