DevSecOps Engineer

About the role

We are looking for a DevSecOps professional to work with security, automation, and critical environments, combining development, operations, and security practices in highly demanding technical infrastructures.

Requirements

• Strong experience with Kubernetes in production, including networking, RBAC, secrets, and troubleshooting;
• CI/CD with GitLab CI, GitHub Actions, Jenkins, Azure DevOps, ArgoCD, or similar tools;
• Experience with Estivador and Helm;
• Knowledge of PKI, X.509, and mTLS, including certificate chains, rotation, and handshake diagnostics;
• Observability with Prometheus, Grafana, and/or OpenTelemetry;
• Infrastructure as Code with Terraform or a similar tool;
• Linux and scripting with Bash, Python, or Go.

Preferred qualifications

• Experience with SPIFFE/SPIRE or with Istio, Linkerd, Vault PKI, or cert-manager;
• Policy as Code with OPA, Gatekeeper, or Kyverno;
• Identity federation and OIDC;
• Supply chain security, with cosign/Sigstore and SBOM;
• Experience with Zero Trust and regulated environments.