We are seeking a highly skilled DevSecOps Engineer to help secure our AWS EKS Kubernetes workplace and CI/CD pipelines as we prepare for a FedRAMP High Audit. We currently manage over 350 container images running on AWS EKS. While direct FedRAMP experience is not mandatory, deep expertise in container security, Kubernetes, cloud security, and automation is essential.

Key Responsibilities

Container Security & Patch Management
- Upgrade vulnerable container images in collaboration with the DevSecOps team, thoroughly testing and promoting updates to production environments.
- Design, develop, and maintain automated container patching pipelines, including:
- Base image refresh automation
- Rebuild triggers
- Automated Pull Request (PR) generation
- Build and maintain vulnerability scanning workflows using Grype, Trivy, or similar tools as CI/CD pipeline gates, preventing promotion of images that exceed defined CVE thresholds.

Cloud Security & Infrastructure Hardening




- Apply cloud hardening controls and maintain Terraform and Ansible code to enforce security configurations across AWS services and Kubernetes nodes.
- Ensure compliance with STIG and CIS Benchmark requirements.
- Analyze Kubernetes IAM configurations and RBAC policies to identify:
- Overprivileged roles
- Security misconfigurations
- Violations of least-privilege principles
- Review and harden Kubernetes networking, including:
- Network policies
- Namespace isolation
- Service-to-service communication controls

Automation & Workflow Orchestration
- Build and manage Argo Workflows to orchestrate end-to-end patch automation, including:
- Vulnerability scanning
- Remediation
- Image rebuilding
- Deployment automation
- Develop Python-based tools for:
- Pipeline automation
- Scan result parsing
- Notification routing
- Security remediation orchestration

CI/CD & Code Quality
- Own and manage GitHub-based development workflows, including:
- Branching strategies
- Pull request creation and review
- Code qua

📌 DevSecOps Engineer _ Bengaluru _ Hybrid
🏢 Trigent Software
📍 Bengaluru