Embedded DevSecOps Engineer - #1110201

We are seeking a dedicated DevSecOps Engineer to join our team. Your primary role will be to design, develop, and maintain the embedded software continuous integration (CI) and continuous testing pipeline. You will work collaboratively with embedded software and security teams to integrate security measures throughout the Software Development Life Cycle (SDLC), fostering a culture of open communication and continuous improvement.

This position offers the opportunity to research and explore new possibilities using the latest technologies and standards. The ideal candidate will bring deep expertise in security best practices, automation, and cloud platforms, with a strong focus on embedding security into every stage of the SDLC.

Key Responsibilities:

• Setup and manage CI/CD infrastructure, provision and maintain service accounts, manage tokens and certificates for tools/apps/services, and perform server maintenance, backups, and recovery planning.

• Design, implement, and maintain CI/CD pipelines; create common build platforms; setup and manage Jenkins servers and build agents.

• Configure and maintain environments across all stages of the development pipeline.

• Implement pipeline monitoring, alerting, and logging to track resource usage; create dashboards to monitor embedded software builds and performance.

• Integrate security practices throughout the SDLC, including vulnerability scanning, code analysis, and compliance checks.

• Develop automation scripts and tools to streamline tasks, reduce manual errors, and embed compliance checks within pipelines.

• Enforce security best practices in cloud environments to safeguard resources and data.

• Work closely with development, operations, and security teams to foster a security-first culture and ensure effective collaboration.

• Develop and maintain standard operating procedures and related documentation.

• Provide work estimates, status reports, and mentor junior engineers to build the next generation of technology leaders.

Qualifications:

• 7+ years of DevOps experience with a strong emphasis on security, preferably in embedded product development.

• Proficiency with tools such as Jenkins, GitLab, Docker, Kubernetes, Ansible, Terraform, and Artifactory.

• Strong expertise in cloud platforms (AWS, Azure, GCP) and their security configurations.

• Hands-on experience with automation tools and scripting (e.g., Ansible, Python, PowerShell, Chef, Terraform, Groovy, JavaScript).

• Experience designing, developing, and migrating CI/CD pipelines.

• Familiarity with VMware virtualization products (vSphere, ESXi, vCenter).

• Knowledge of security frameworks and standards (OWASP, NIST, IEC 62443).

• Solid understanding of network security, data encryption, and secure coding practices.

• Excellent grasp of SDLC, CI/CD concepts, and Agile methodologies.

• Strong analytical and creative problem-solving abilities.

• Effective communicator, able to explain technical concepts to non-technical stakeholders.

• Ability to prioritize and manage time in a fast-paced, changing environment.

• High attention to detail and commitment to quality.

EA Licence No.:18S9405 / EA Reg. No.:R1330864

Percept Solutions is expanding and actively seeking talented individuals. We encourage applicants to follow Percept Solutions on LinkedIn at https://www.linkedin.com/company/percept-solutions/ to stay informed about new opportunities and events.