NYB - DevSecOps Engineer
Area US – IT
Vacancies 2 consultants
Description
TWO VACANCIES
Location: 1 x NY (hybrid), 1 x Madrid/Málaga/MX/Latam (remote, NY working
hours)
Start: ASAP
Duration: All 2026
Project, Role and Task Descriptions:
• Design, implement, and maintain secure CI/CD pipelines for application build,
test, and deployment.
• Integrate security scanning, compliance checks, and vulnerability
management into development and deployment workflows.
• Automate infrastructure provisioning, configuration, and application
deployment using modern DevSecOps tools.
• Collaborate with development, QA, security, and operations teams to ensure
security is embedded throughout the SDLC.
• Support and enhance containerization, orchestration, and cloud environments
with a strong focus on security best practices.
Candidate Must-Have Skills, Requirements and Nice-to -Have Skills:
o CI/CD, Version Control & Security Integration: Experience building enterprise-
grade CI/CD pipelines. GitHub (branching, PR workflows, GitHub Actions),
GitHub Actions (secure workflows, secrets management, runner configuration),
Jenkins (scripted/declarative pipelines, shared libraries), SonarQube (code
quality, SAST), Fortify (static code analysis, security scanning). Experience
setting up artifact repositories (Nexus, JFrog, ECR)
o Configuration Management & Automation: Ansible (roles, playbooks, secure
inventory handling). Puppet (manifests, modules, environment management).
Strong understanding of Infrastructure as Code (IaC) concepts and tooling
(Terraform or CloudFrormation).
o Scripting & Development : Bash, Python, Groovy (both for Jenkins and
development). Ability to write automation scripts.
o Cloud : EC2, S3, IAM (roles, policies, least privilege), VPC networking basics,
AWS CloudWatch, SSM, ECS/EKS
o Nice to have : Docker, Openshift, Helm
SKILLS REQUIRED YRS LAST TIME COMMENTS
OF USED
EXP
Experience building
enterprise-grade CI/CD
pipelines.
GitHub (branching, PR
workflows, GitHub Actions),
GitHub Actions (secure
workflows, secrets
management, runner
configuration),
Jenkins (scripted/declarative
pipelines, shared libraries),
SonarQube (code quality,
SAST),
Fortify (static code analysis,
security scanning).
Experience setting up artifact
repositories (Nexus, JFrog,
ECR)
o Configuration Management
& Automation: Ansible (roles,
playbooks, secure inventory
handling). Puppet (manifests,
modules, environment
management).
Strong understanding of
Infrastructure as Code (IaC)
concepts and tooling
(Terraform or
CloudFrormation).
o Scripting & Development :
Bash, Python, Groovy (both
for Jenkins and development).
Ability to write automation
scripts.
o Cloud : EC2, S3, IAM (roles,
policies, least privilege), VPC
networking basics, AWS
CloudWatch, SSM, ECS/EKS
o Nice to have : Docker,
Openshift, Helm