DevSecOps Engineer

Key Responsibilities

• Design and implement end to end automation for IAM platforms such as PAM, PQC, Vault, PKI, Directory Services etc.,
• Automate IAM operational use cases like Access provisioning and de provisioning, Service account lifecycle and password rotation, Certificate lifecycle operations, and compliance / health checks etc.,
• Develop reusable, scalable automation frameworks aligned with security and audit requirements
• Build and maintain CI/CD pipelines using Jenkins to deploy and execute IAM automation securely
• Integrate IAM automation with ServiceNow, APIs, and enterprise workflows
• Develop and maintain automation using Python for orchestration, API integrations, and data processing, PowerShell for Windows based IAM automation, Ansible for configuration management and orchestration
• Ensure scripts follow secure coding standards and are production ready
• Use Terraform to provision and manage IAM related infrastructure and cloud resources
• Apply Chef or equivalent configuration tools for consistent environment configuration
• Ensure infrastructure deployments are idempotent, auditable, and compliant with enterprise standards
• Build and support containerized automation workloads using Docker and Kubernetes
• Support scalability, resiliency, and DR readiness of automation platforms
• Implement logging, monitoring, and alerting for automation execution and failures
• Support operational handover, documentation, and runbooks

Required Skills & Experience

• 4+ years of experience in DevSecOps / Security Automation
• Strong hands-on expertise with: Python, PowerShell, Ansible, Jenkins, Terraform, Chef, and Kubernetes
• Good understanding of IAM concepts, including Privileged Access Management (PAM), Post Quantum Cryptography, Service accounts, PKI / Certificates, Authentication, and authorization flows
• Experience automating IAM platforms and security tools in enterprise environments
• Experience with Linux and Windows environments
• Strong API integration experience (REST, JSON, OAuth, tokens)
• Familiarity with Git, artifact repositories, and Agile delivery tools

Qualifications:

• Minimum of 4 years of related experience
• Bachelor's degree preferred or equivalent experience

Talents Needed for Success:

• IAM automation is secure, reliable, and scalable
• Manual IAM operational effort and risk is significantly reduced
• Security and compliance controls are consistently enforced through automation
• DevSecOps pipelines enable faster, safer IAM change delivery

IT Risk and Data Services department seeks to meet our clients needs by capitalizing on the progress made in both the Risk Technology Program and the Data Analytics work and driving adoption of these capabilities across the enterprise. Important initiatives like the Modernization and Resiliency Programs count on these foundational capabilities to succeed.