Senior DevSecOps Engineer

Job summary

Define and implement security controls and hardening standards for the OpenShift AI environment, including access controls, compliance, and file integrity monitoring. Integrate identity and privileged-access tools, secure CI/CD pipelines, and establish SIEM monitoring and vulnerability-remediation processes.

Job details

MatchBox Consulting Group is currently seeking a Senior DevSecOps Engineer for a remote part-time 4 month contract with a client of ours located in Sask Responsibilities Define and implement security controls and hardening standards across the OpenShift AI environment, including RBAC, CIS-aligned compliance and file integrity monitoring. Integrate enterprise identity and privileged-access solutions, including Okta OIDC-based SSO and BeyondTrust. Build security controls into GitLab CI/CD pipelines, including container image vulnerability scanning, signing, certificate management and secrets-management practices. Establish security monitoring and vulnerability-management processes, including log and audit forwarding into the client's SIEM and remediation workflows for identified vulnerabilities. Requirements: Experience with OpenShift hardening, RBAC, and the Compliance and File Integrity Operators using CIS benchmarks. Experience integrating Okta single sign-on using OIDC and BeyondTrust privileged access. Experience with GitLab CI/CD and container security tooling, including image scanning such as Trivy and image signing using cosign. Experience with cert-manager and secrets management. Experience forwarding OpenShift logs and audit data to a SIEM. Demonstrated ability to establish a vulnerability-management process from scratch. For more current job opportunities, Follow MatchBox at linkedin.com/company/matchbox-recruitment/ _________________________ About MatchBox Headquartered in downtown Vancouver and serving clients nationally, MatchBox is one of the leading recruitment and solutions firms that specializes in the fields of IT & Technology, Engineering & Technical, Real Estate & Construction, and Accounting & Finance. We offer unrivaled expertise with our team's extensive experience in the recruitment and professional services industry. We are dedicated to building great connections and creating strong opportunities within the workforce and the labor market. Equal Opportunities MatchBox is committed to providing equal opportunities for all applicants. We welcome and encourage applications from people of all backgrounds, including members of minority groups such as racialized individuals, people with disabilities, LGBTQ+ individuals, and Indigenous peoples. It is a priority for us that all candidates are treated fairly and without discrimination. Our recruitment teams receive ongoing training on using objective criteria for evaluating candidates and other related topics to create an inclusive and welcoming environment for all. Work Permits Please note that we require all interested candidates to obtain the necessary work permits from the Government of Canada prior to submitting an application. This position is open exclusively to individuals residing in Canada and legally authorized to work in Canada. Applications not meeting these criteria will not be considered. Further Consideration We receive a high volume of applications and are only able to contact candidates who are selected for further consideration. Find out more at www.matchboxhr.com

What you’ll do

Define and implement security controls and hardening standards for the OpenShift AI environment, including access controls, compliance, and file integrity monitoring. Integrate identity and privileged-access tools, secure CI/CD pipelines, and establish SIEM monitoring and vulnerability-remediation processes.

Requirements

Candidates need experience hardening OpenShift with RBAC and CIS-aligned compliance and file integrity tools, and integrating Okta OIDC SSO and BeyondTrust. They should also have experience with GitLab CI/CD container security, certificate and secrets management, SIEM log forwarding, and creating vulnerability-management processes.

Listed skills

• CI/CD · Preferred
• Compliance · Preferred
• management · Preferred
• Recruitment · Preferred
• Okta · Preferred
• Audit · Preferred
• Client · Preferred
• Accounting · Preferred
• Dedicated · Preferred
• Process · Preferred
• Teams · Preferred
• Technical · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• OpenShift Hardening
• Role-Based Access Control (RBAC)
• CIS Compliance
• File Integrity Monitoring
• Okta OIDC Single Sign-On
• BeyondTrust
• GitLab CI/CD
• Container Image Scanning
• Trivy
• Cosign Image Signing
• Certificate Management
• Secrets Management
• SIEM Integration
• Log and Audit Forwarding
• Vulnerability Management

Job areas

• Technology
• Software
• Security & Safety

More jobs from MatchBox Consulting Group