Senior DevSecOps Engineer – CI-CD Pipelines

This is a fully remote position, open to applicants in Bulgaria.

📋 Description

• Transition containerized applications from Docker Compose to Kubernetes (k3s).

• Design, construct, and manage secure CI/CD pipelines utilizing Azure DevOps and GitLab CI/CD or Jenkins.

• Incorporate security measures into the delivery workflow, including static code analysis, dependency scanning, container image scanning, secrets detection, image signing, vulnerability management, and release gates.

• Facilitate deployment automation, environment promotion, rollback, traceability, and release reliability.

• Collaborate closely with development, infrastructure, and security teams to enhance automation, resilience, and secure delivery methodologies.

• Diagnose and resolve build, deployment, and runtime challenges across CI/CD and Kubernetes environments.

• Document the solutions implemented and promote best practices in DevSecOps within the team.

⛳️ Requirements

• Over 6 years of professional experience in DevSecOps, Platform Engineering, or related disciplines.

• Extensive hands-on experience with Docker and Kubernetes; familiarity with k3s is highly preferred.

• Demonstrated experience in migrating workloads from Docker Compose to Kubernetes.

• Strong practical expertise in establishing CI/CD pipelines using Azure DevOps, along with GitLab CI/CD or Jenkins.

• In-depth hands-on experience with DevSecOps and software supply chain security practices, including SAST, dependency scanning, container/image scanning, secrets management, and image signing.

• Solid understanding of cloud or hybrid infrastructure, Linux environments, and automation/scripting.

• Experience with Git-based workflows, Agile/Scrum delivery methodologies, and collaborative tools like Azure DevOps, GitLab, and Jira.

• Excellent troubleshooting, communication, and documentation abilities.

• Proficient spoken and written English skills.

🏝️ Benefits

• Flexibility to work remotely.

• Hands-on experience in DevSecOps.