DevSecOps Engineer

Introduction
At IBM, work is more than a job – it’s a calling: To build. To design. To code. To consult. To think along with clients and sell. To make markets. To invent. To collaborate. Not just to do something better, but to attempt things you’ve never thought possible. Are you ready to lead in this new era of technology and solve some of the world’s most challenging problems? If so, lets talk.

Your Role and Responsibilities
Software Developers at IBM are the backbone of our strategic initiatives to design, code, test, and provide industry-leading solutions that make the world run today – planes and trains take off on time, bank transactions complete in the blink of an eye and the world remains safe because of the work our software developers do. Whether you are working on projects internally or for a client, software development is critical to the success of IBM and our clients worldwide. At IBM, you will use the latest software development tools, techniques and approaches and work with leading minds in the industry to build solutions you can be proud of.
At IBM, you will be part of the Watson Studio Trust team and help deliver capabilities that enable organizations to deploy and scale trustworthy AI applications.
This role is focused on SecOps along with DevOps skills.
You will be responsible for identifying and resolving security issues across all infrastructure.

• You will be responsible for evaluating and responding to various alerts and events generated from security tools and acting as a security focal point.
• You will be responsible for collaborating with security leadership, engineering, and compliance teams to execute security strategies.
• You will be responsible for advising as a subject matter expert on security tools, applications, and processes.
• You will be responsible for reviewing our architecture and design through a security lens, providing actionable and timely requirements and recommendations.
• You will be responsible for tuning security tool configurations to minimize false positives.
• You will be responsible for helping the team achieve security compliance.
• Additionally, you will work with customers to help them succeed in their AI journey by adopting Watsonx.governance AI solutions.”

Required Technical and Professional Expertise

• 4+ years of relevant industry experience
• Experience working on secure setup of microservices, databases
• Reasonable experience in securing data in motion with SSL protocol
• Experience in securing Kubernetes resources
• Experience in security compliance certifications like FIPS, SOC2, etc.
• Experience in securing web applications and guiding development teams on secure coding practices
• Working knowledge of Linux
• Well-versed with Kubernetes (OpenShift) and Docker, container automation, and deploying Kubernetes clusters in the cloud (preferably Azure)
• Experience managing environments in one of the cloud environments (Azure, AWS, GCP, or IBM Cloud)
• Use dynamic secrets management to secure microservice-based architectures
• Undertake continuous security monitoring, review, and improvement across all Cloud infrastructure”

Preferred Technical and Professional Expertise

• Experience in creating Docker images, Docker files, maintaining versions of builds and images, Openshift, Helm charts
• Configuration of CI/CD pipeline to build, test, and deploy Java, Angular, and .Net applications using Jenkins, Travis, or Tekton
• Knowledge of ArgoCD
• Experience in troubleshooting Docker containers in a production environment
• Familiarity with Cloudlogs or Prometheus for cluster analysis in a Kubernetes environment
• Encourage and promote a culture of collaboration between teams”