DevSecOps Engineer

Location

Palo Alto, CA (Candidate being based at our Palo Alto HQ is highly desired; we will consider exceptional Washington, D.C. - based candidates if they can maintain a routine and flexible travel schedule. Rhombus may offer relocation assistance for qualified individuals.)

Job Description

We are seeking a skilled DevSecOps Engineer to support our team who will help to build and maintain development, data and operational pipelines. In this role, you will design and automate CI/CD pipelines, manage cloud infrastructure through Infrastructure as Code (IaC), and implement security controls to protect critical systems. You will work closely with development teams to enhance automation and ensure compliance with security policies. The ideal candidate will have experience in Linux system management, API security, and cloud security practices, along with the ability to collaborate in Agile environments and respond to production and security incidents proactively.

Responsibilities

• Implement Infrastructure as Code to manage cloud resources efficiently, ensuring scalability and flexibility for all workloads.
• Integrate security controls into the development lifecycle (DevSecOps principles) to ensure systems are secure from the outset.
• Implement containerization (e.g., Docker, Kubernetes) for deployment, ensuring security practices are embedded into container lifecycle management.
• Develop and maintain security automation tools and processes.
• Actively participate in incident response and compliance activities.
• Be available for on-call support and system maintenance tasks during non-working hours and days.

Qualifications

• Bachelor's or Master's degree in Computer Science, Information Security, or a related field.
• Expertise in containerization technologies such as Docker and Kubernetes.
• Solid understanding of cloud platforms like AWS, Azure, or Google Cloud.
• Experience with Git based source control platforms like GitLab and GitHub.
• Programming proficiency in languages like Python or Bash scripting.
• Experience building CI/CD pipelines from scratch with security checks and automated tests integrated, in a context of deploying into Kubernetes.
• Knowledge of vulnerability management, static code analysis, and security testing tools.
• Strong collaboration and communication skills, with the ability to work in Agile environments.