DevOps/SecOps Consultant

Stack

Responsibilities

• ▹Design, administer and optimize modern development and operations environments
• ▹Develop CI/CD pipelines with automated security checks, vulnerability scanning and secrets management
• ▹Work with Infrastructure as Code, configuration management and automation to create reproducible, scalable and secure environments
• ▹Operate, securely configure and harden container and Kubernetes environments
• ▹Use monitoring, logging and observability to identify anomalies, vulnerabilities and potential security threats

Requirements

• ▹Experience in software development, scripting and automation, for example with Python, and a good understanding of DevSecOps principles
• ▹Experience administering, developing and optimizing CI/CD pipelines and implementing security controls such as SAST, DAST, dependency scanning, container scanning or secrets scanning
• ▹Knowledge of Git repository management, Git workflows, branching strategies and secure handling of repositories, code, dependencies and artifacts
• ▹Experience with Infrastructure as Code, for example Terraform, and configuration management and automation with Ansible, Puppet, Chef or similar tools
• ▹Experience with Docker and Kubernetes, including hardening, RBAC, secrets management and vulnerability management, plus knowledge of IAM, least privilege and role-based access control
• ▹Knowledge of monitoring, logging and observability, vulnerability management and patching, and a basic understanding of cloud security and network security, such as firewalls, segmentation, TLS, certificates and secure service-to-service communication

Nice to have

• ▹Experience with Azure, AWS or Google Cloud with a focus on security, and with security tools for SAST, DAST, Software Composition Analysis, container scanning or secrets scanning
• ▹Experience with SIEM, centralized log management, Security Operations, incident handling, incident response or security monitoring
• ▹Knowledge of policy as code and automated verification that infrastructure and deployments meet defined security requirements
• ▹Advanced Kubernetes security experience, such as network policies, RBAC, admission policies or runtime security, and secrets management with HashiCorp Vault or similar
• ▹Experience with Golang or CI/CD automation flows involving custom hardware, for example in-house developed test rigs
• ▹Experience with security standards or frameworks such as ISO 27001, NIST, CIS Benchmarks or OWASP

Soft skills

What we offer

• ▹A competent team where collaboration and knowledge sharing are a natural part of the work
• ▹Varied client assignments and technically challenging projects that let you broaden and deepen your skills in automation, cloud, DevOps and cybersecurity
• ▹A learning environment where technology, security and creativity meet

About the company

Knowit is a Nordic consultancy that helps companies, public sector organizations and businesses succeed in digital transformation. With expertise in software development, AI, cybersecurity, cloud services, digital customer experiences and management consulting, it has about 3,700 employees, primarily in the Nordics but also in Poland, Serbia and Germany. This role is part of Knowit Connectivity, which works on embedded and connected solutions.