Vision Square INCRemote
DevSecOps Engineer with OpenStack exp
United States of America
Contract
1 hour ago
H1B Sponsor Likely
Key skills
TerraformAnsibleBash scriptingPython scriptingOpenStackKubernetesDockerGitLab CIConcourseGitHub ActionsSecure configuration managementIdentity managementLeast privilegePrometheusSplunkELKThreat modelingPatch managementSystem hardeningPythonBashKafkaVaultIdentity ManagementGitHubGitLabCI/CD
About this role
Vision Square INC is seeking a DevSecOps Engineer with OpenStack experience to enhance their software delivery processes. The role involves developing CI/CD pipelines, integrating security controls, and collaborating with various teams to ensure reliable and secure deployments.
Responsibilities:
- Develop, maintain, and improve CI/CD pipelines to ensure secure, repeatable software delivery
- Implement and manage infrastructure-as-code using Terraform, Ansible, and scripting (e.g., Bash, Python)
- Integrate security and compliance controls into build and release workflows, emphasizing continuous validation and traceability
- Collaborate with developers, platform engineers, and security teams to improve reliability, performance, and observability
- Support the automation of infrastructure provisioning, configuration management, and policy enforcement across cloud and on-prem environments
- Monitor, troubleshoot, and optimize deployments using telemetry and event-driven tooling (e.g., Prometheus, Splunk, or ELK)
- Participate in threat modeling, patch management, and hardening of systems, containers, and CI/CD components
- Contribute to knowledge sharing and documentation of DevSecOps patterns and best practices
Requirements:
- Proven experience (6+ years) with Terraform, Ansible, and Bash scripting in production environments
- Experience with cloud platforms (OpenStack) and containerized workloads (Kubernetes, Docker)
- Working knowledge of CI/CD tools such as GitLab CI, Concourse, or GitHub Actions
- Understanding of secure configuration management, least privilege, and identity management concepts
- Experience troubleshooting complex system issues across application, network, and OS layer
- Familiarity with logging and observability tools (Splunk, Vector, or Kafka)
- Knowledge of Vault, KMS, or secret management best practices
- Understanding of compliance frameworks (FedRAMP, ISO 27001, CIS, or NIST 800-53)
- Awareness of FIPS-compliant cryptography or secure enclave deployments