Senior DevSecOps Engineer Needed for DevSecOps Pipeline Workstream

NexGen Media

Contract · Remote · Flexible hours

About the role

NexGen Media is modernizing its legacy streaming orchestration platform, codenamed "PulseForge", to achieve true zero‑downtime deployments. As a Senior DevSecOps Engineer you will embed security into the CI/CD pipeline while refactoring the existing infrastructure for cloud‑native resiliency.

Key responsibilities

• Design and implement a blue‑green deployment strategy for PulseForge using AWS CodeDeploy and Terraform.
• Integrate static application security testing (SAST) and container image scanning (Trivy) into GitHub Actions workflows.
• Migrate legacy Jenkins jobs to a unified GitLab CI pipeline with automated secret management via HashiCorp Vault.
• Establish runtime security monitoring with Falco and AWS GuardDuty to detect anomalies during live traffic.
• Document and enforce security policies for IaC code reviews, ensuring compliance with PCI‑DSS requirements.

Must-have skills

• Extensive experience with AWS services (ECS, EKS, IAM).
• Proficient in Docker, Kubernetes, and Terraform for infrastructure as code.
• Deep knowledge of CI/CD tools (GitHub Actions, GitLab CI) and security scanning integrations.
• Hands‑on expertise in secret management and automated compliance checks.

Nice to have

• Familiarity with serverless frameworks (AWS Lambda) for edge security functions.
• Experience with chaos engineering tools to validate zero‑downtime rollouts.