DevSecOps Engineer

Orion Innovation is a premier, award-winning, global business and technology services firm. Orion delivers game-changing business transformation and product development rooted in digital strategy, experience design, and engineering, with a unique combination of agility, scale, and maturity. We work with a wide range of clients across many industries including financial services, professional services, telecommunications and media, consumer products, automotive, industrial automation, professional sports and entertainment, life sciences, ecommerce, and education. Description: DevSecOps Engineer to strengthen our software development lifecycle by embedding security practices into every stage of delivery. This role will work across development, operations, and security teams to ensure applications and infrastructure are secure, compliant, and resilient, while maintaining speed and efficiency in deployment. The ideal candidate will be responsible for streamlining our development and operational processes, ensuring efficient deployment and management of applications in cloud environments. This role requires a strong understanding of cloud computing, IT infrastructure, and software development practices. You will work closely with development teams to implement CI/CD pipelines, manage cloud resources, and enhance system performance. Key Responsibilities: • 10 years’ experience in the performance of Release management in DEV/SIT/CAT/PROD environments for major/minor releases, patches and upgrades • Ability to Create/ manage/support Continuous Integration/Continuous Delivery (CI/CD) pipeline; • 10 years’ experience in the support of and to provide code promotion and monitoring; and Support data fixes as required. • 3 years’ experience with Copilot and /or any AI-enabled tasks to convert manual tasks into automated workflows • Demonstrated expertise in AI technologies, methodologies, frameworks, tools, and enterprise AI implementation practices. • Integrate existing automation frameworks with AI-based solutions to improve coverage, reliability, and efficiency. • Ensure all AI scripts and programs are fully executable on postal-issued laptops within approved security and environment constraints. • 5 years’ experience in the design, implementing, and maintaining secure CI/CD pipelines with automated security checks. • Knowledge of Integration application security testing tools (SAST, DAST, SCA) into development workflows. • Ability to collaborate with developers to enforce secure coding practices • 3 year’s Expertise Secure Coding Standards enforced during development • Static and Dynamic Application Security Testing (SAST/DAST), integrated into pipelines. • Automate compliance checks, code analysis in CI/CD Pipelines. • Hands on experience with Jenkins, GitLab CI/CD, Azure DevOps, or CircleCI to embed security checks. • Deep knowledge of AWS, Azure, or GCP security services and configurations. • Experience securing Docker and Kubernetes workloads. • Proficiency in languages like Python, Java, to automate security tasks • Familiarity with Terraform, Ansible, or CloudFormation, with emphasis on secure configurations. • Collaborate with software developers and IT staff to oversee code releases and deployments. • Design and implement scalable cloud architecture using platforms such as AWS, Google Cloud Platform, or Azure. • Manage containerization technologies such as Docker and orchestration tools like Kubernetes. • Utilize Infrastructure as Code (IaC) tools like Ansible for automated provisioning of infrastructure. • Ensure system reliability through monitoring, logging, and alerting using tools like Jenkins and Git. • Develop RESTful APIs and microservices to facilitate communication between applications. • Maintain databases including MySQL, PostgreSQL, Oracle, and Microsoft SQL Server. • Participate in Agile development processes to improve software delivery cycles. • Troubleshoot issues across the appl