Azure DevSecOps Engineer

Location: London (Hybrid 2 days per week on site) / Poland (Remote) / Romania (Remote)
Employment Type: Urgent, Contract/Freelance (UK-Inside IR-35)

Overview

We are looking for a highly skilled Azure DevSecOps Engineer to join our team in London. This is an urgent requirement for a key role that focuses on securing and automating the development pipeline within Azure environments. The successful candidate will have a deep understanding of both DevOps and security practices to enhance and protect our infrastructure.

Key Responsibilities:

• Deploying Azure Resources via Azure DevOps CI/CD: Automate the deployment of cloud infrastructure and services using Azure DevOps CI/CD pipelines.
• DevOps and GitOps Concepts: Apply best practices in DevOps, with a particular focus on GitOps, ensuring smooth and secure code deployment and infrastructure management.
• Azure DevOps Repositories and Security: Manage and secure Azure DevOps repositories, implementing access control, branch policies, and ensuring code security.
• Azure Container Registry Management: Efficiently manage containerized applications using Azure Container Registry, ensuring security and compliance throughout.
• Azure Defender and Security Integrations: Implement and manage Azure Defender to provide comprehensive security across your resources, with integrations into other security tools.
• Azure Monitoring and Alerts: Set up and manage Azure monitoring and alerts to ensure visibility, performance tracking, and timely incident response.
• Security and Compliance Scanning Tools: (Nice to have) Experience with infrastructure scanning tools like Checkov and code security tools like GitHub Advanced Security. (Good to know) SIEM tools such as Azure Sentinel for comprehensive threat detection and incident management.
•  Azure Policy Implementation: Create and enforce Azure policies to ensure compliance with security and governance standards.
• Quality Gates for Deployment: Define and enforce quality gates and practices for safe and efficient software deployment.
• DotNet Pipelines: Design, implement, and manage CI/CD pipelines for .NET applications, ensuring they are secure and compliant.
• PowerShell Automation/Scripting for Azure: Utilize PowerShell scripting to automate and manage Azure services and resources.

Qualifications & Skills:

•    Strong experience with Azure DevOps (CI/CD, Pipelines, Repositories)

•    Proficient in Azure security tools such as Azure Defender, Policy, and Sentinel

•    Understanding of containerization and Azure Container Registry

•    Experience with infrastructure-as-code and PowerShell scripting

•    Familiar with security scanning tools like Checkov, GitHub Advanced Security, and SIEM tools like Sentinel

•    Proven ability to enforce security compliance and manage quality gates during deployment

•    Solid grasp of DevOps principles and GitOps for code and infrastructure management

•    Hands-on experience with .NET pipelines and automation