DevSecOps Engineer

Your Role and Responsibilities Who you are:
Software Developers at IBM are the backbone of our strategic initiatives to design, code, test, and provide industry-leading solutions that make the world run today - planes and trains take off on time, bank transactions complete in the blink of an eye and the world remains safe because of the work our software developers do. Whether you are working on projects internally or for a client, software development is critical to the success of IBM and our clients worldwide. At IBM, you will use the latest software development tools, techniques and approaches and work with leading minds in the industry to build solutions you can be proud of.

What youll do:

At IBM, you will be part of the Watson Studio Trust team and help deliver capabilities that enable organizations to deploy and scale trustworthy AI applications.

This role is focused on SecOps along with DevOps skills.

You will be responsible for identifying and resolving security issues across all infrastructure.

You will be responsible for evaluating and responding to various alerts and events generated from security tools and acting as a security focal point.

You will be responsible for collaborating with security leadership, engineering, and compliance teams to execute security strategies.

You will be responsible for advising as a subject matter expert on security tools, applications, and processes.

You will be responsible for reviewing our architecture and design through a security lens, providing actionable and timely requirements and recommendations.

You will be responsible for tuning security tool configurations to minimize false positives.

You will be responsible for helping the team achieve security compliance.

Additionally, you will work with customers to help them succeed in their AI journey by adopting Watsonx.governance AI solutions.

Required Technical and Professional Expertise

Minimum 5+ years of Software Domain Experience

4+ years of relevant industry experience

Experience working on secure setup of microservices, databases

Reasonable experience in securing data in motion with SSL protocol

Experience in securing Kubernetes resources

Experience in security compliance certifications like FIPS, SOC2, etc.

Experience in securing web applications and guiding development teams on secure coding practices

Working knowledge of Linux

Well-versed with Kubernetes (OpenShift) and Docker, container automation, and deploying Kubernetes clusters in the cloud (preferably Azure)

Experience managing environments in one of the cloud environments (Azure, AWS, GCP, or IBM Cloud)

Use dynamic secrets management to secure microservice-based architectures

Undertake continuous security monitoring, review, and improvement across all Cloud infrastructure

Preferred Technical and Professional Expertise

Experience in creating Docker images, Docker files, maintaining versions of builds and images, Openshift, Helm charts

Configuration of CI/CD pipeline to build, test, and deploy Java, Angular, and .Net applications using Jenkins, Travis, or Tekton

Knowledge of ArgoCD

Experience in troubleshooting Docker containers in a production environment

Familiarity with Cloudlogs or Prometheus for cluster analysis in a Kubernetes environment

Encourage and promote a culture of collaboration between teams