DevSecOps Engineer

About the project: We're seeking an experienced DevSecOps Engineer to take ownership of our Client's Internal Developer Platform (IDP) based on Port.io. In this role, you'll empower engineering teams through self-service capabilities, standardized deployment templates, automation, and built-in security practices. You'll be at the intersection of development, security, and operations - shaping a platform that streamlines delivery, enforces compliance, and improves developer experience across the organization. Key responsibilities: - Design, implement, and manage the Internal Developer Platform using Port.io, ensuring a smooth and efficient self-service experience for engineering teams. - Develop and maintain "golden paths" - reusable, secure templates for application and infrastructure deployment. - Integrate the IDP with CI/CD pipelines, cloud environments (AWS, Azure, or GCP), and developer tools to enable consistent and automated workflows. - Embed DevSecOps principles at every stage, including vulnerability scanning, policy-as-code, and automated compliance checks. - Enhance developer productivity and platform usability through continuous improvements and feedback loops. - Troubleshoot, monitor, and support IDP infrastructure and integrations. - Evaluate and introduce new tools or automation that strengthen the platform's reliability and security. - Maintain up-to-date documentation, best practice guides, and onboarding materials for platform users. Requirements: - Proven experience in DevSecOps, Platform Engineering, or similar roles. - Advanced knowledge of Port.io or similar IDP/self-service platforms - Strong knowledge of cloud-native technologies (Kubernetes, Docker) and cloud services (AWS, Azure, or GCP). - Solid understanding of CI/CD pipelines and tools (e.g., GitHub Actions, Jenkins, Argo CD, GitLab CI). - Proficiency with Infrastructure as Code tools such as Terraform, Pulumi, or Ansible. - Deep understanding of cloud security, including secrets management, vulnerability scanning, and compliance automation. - Excellent communication skills and the ability to collaborate effectively with development, security, and operations teams. - Experience building software catalogs, component libraries, or deployment templates. - Scripting proficiency (Python, Go, Bash). - Familiarity with DevOps security tooling and remediation workflows.