We are seeking a highly skilled DevSecOps Engineer to help secure our AWS EKS Kubernetes workplace and CI/CD pipelines as we prepare for a FedRAMP High Audit. We currently manage over 350 container images running on AWS EKS. While direct FedRAMP experience is not mandatory, deep expertise in container security, Kubernetes, cloud security, and automation is essential.

Key Responsibilities

Container Security & Patch Management
Upgrade vulnerable container images in collaboration with the DevSecOps team, thoroughly testing and promoting updates to production settings.
Design, develop, and maintain automated container patching pipelines, including:
Base image refresh automation
Rebuild triggers
Automated Pull Request (PR) generation
Build and maintain vulnerability scanning workflows using Grype, Trivy, or similar tools as CI/CD pipeline gates, preventing promotion of images that exceed defined CVE thresholds.

Cloud Security & Infrastructure Hardening




Apply cloud hardening controls and maintain Terraform and Ansible code to enforce security configurations across AWS services and Kubernetes nodes.
Ensure compliance with STIG and CIS Benchmark requirements.
Analyze Kubernetes IAM configurations and RBAC policies to identify:
Overprivileged roles
Security misconfigurations
Violations of least-privilege principles
Review and harden Kubernetes networking, including:
Network policies
Namespace isolation
Service-to-service communication controls

Automation & Workflow Orchestration
Build and manage Argo Workflows to orchestrate end-to-end patch automation, including:
Vulnerability scanning
Remediation
Image rebuilding
Deployment automation
Develop Python-based tools for:
Pipeline automation
Scan result parsing
Notification routing
Security remediation orchestration

CI/CD & Code Quality
Own and manage GitHub-based development workflows, including:
Branching strategies
Pull request creation and review
Code qua

📌 Devsecops Engineer Bengaluru Hybrid
🏢 Trigent Software
📍 Bengaluru