What are the responsibilities and job description for the DevSecOps Engineer, Consultant position at Blue Shield of CA?
Your Role
As a DevSecOps Engineer Consultant, you will play a crucial role in ensuring the security and quality of software products. Your primary responsibility will be to establish the best practices and standards for Automation Testing, DevSecOps methodologies, ensuring a secure and seamless transition to the cloud environment. You will lead the implementation of DevSecOps best practices, specifically tailored for Azure, and collaborate with cross-functional teams to ensure security is integrated throughout the software development lifecycle. You will also organize training and provide mentoring to help others get up to speed on DevSecOps best practices. A strong focus on cloud solutions and design will be essential to support the seamless integration of applications on Azure.
Your knowledge and Experience
- Bachelor's degree in computer science, Information Technology, or related field. Master's degree in computer science, Information Technology preferred.
- Requires a minimum of 7 years of experience in IT development and quality engineering
- Prefers 2 years of experience in DevSecOps field
- Prefers 1 year of hands-on experience with cloud platforms and Infrastructure as code
- Proven hands-on experience in cloud solutions and design for secure and compliant integration of applications on Microsoft Azure.
- Solid understanding of DevSecOps principles.
- Implementing Selenium testing platform using test scripts with Eclipse IDE, writing Selenium Webdriver scripts using TestNG
- Strong coding skills with Java and Python to Automate manual Test cases
- Experience on Python Robot Framework
- Experience on writing SQL sub-queries, nested queries for Database Automation
- Ansible expertise in creating playbooks and templates in Ansible Automation Platform.
- Experience with CI/CD pipelines, and automation tools like Jenkins, Ansible, Jira, GitLab CI, Jfrog Artifactory, Bitbucket, or Azure DevOps, with a focus on security integration and automated testing at all stages.
- Preferred Azure 900 certified
- Strong knowledge of scripting languages (e.g., PowerShell, Bash, Python) for automation tasks, with an emphasis on security-related automation.
- Experience in implementing and managing containerized applications using Docker and orchestration platforms like Kubernetes, with security considerations in mind.
- Familiarity with infrastructure as code (IaC) concepts and tools such as Terraform or Ansible, with a focus on security best practices.
- Expertise in cloud security best practices and their implementation within Azure environment.
- Excellent problem-solving skills and ability to troubleshoot security-related issues.
- Preferred experience in leading digital transformation projects and cloud migration efforts with a strong focus on security.
- Understanding of and experience with AIOps concepts and tools like Prometheus, Grafana, or ELK stack, and platforms like OpsRamp or Dynatrace, would be strongly preferred.
- Experience with performance optimization as applied to cloud infrastructure and cloud application architectures.
External hires must pass a background check/drug screen. Qualified applicants with arrest records and/or conviction records will be considered for employment in a manner consistent with Federal, State and local laws, including but not limited to the San Francisco Fair Chance Ordinance. All qualified applicants will receive consideration for employment without regards to race, color, religion, sex, national origin, sexual orientation, gender identity, protected veteran status or disability status and any other classification protected by Federal, State and local laws.
