Open-Source Software Engineer

About the Role: Grade Level (for internal use): 09 We are seeking a DevSecOps Engineer to help build and support secure, scalable software delivery practices. This role will design and maintain secure CI/CD pipelines, strengthen container and artifact security, and improve automation across the software development lifecycle. The ideal candidate brings hands-on experience with Kubernetes, JFrog Artifactory, and GitHub Enterprise, and collaborates effectively with engineering, platform, and security teams. Key Responsibilities Design and maintain secure CI/CD pipelines using GitHub Enterprise and related automation tools. Manage JFrog Artifactory, including repository governance, access controls, and integration with build and release processes. Implement Kubernetes security best practices, including RBAC, secrets management, network policies, and image security. Embed automated security controls into the delivery lifecycle, such as code, dependency, and container scanning. Partner with engineering, platform, and security teams to improve delivery speed, reliability, and risk reduction. Support infrastructure-as-code and configuration-as-code to improve consistency and auditability. Monitor and troubleshoot pipeline, deployment, and security issues across development and runtime environments. Create documentation, standards, and reusable patterns for secure software delivery. Required Qualifications Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field, or equivalent experience. 3+ years of experience in DevOps, DevSecOps, platform engineering, or security engineering. Hands-on experience with Kubernetes administration and security controls. Experience with JFrog Artifactory in enterprise build and release environments. Experience with GitHub Enterprise, including repositories, pull requests, branch protection, and GitHub Actions. Understanding of CI/CD, infrastructure automation, and software supply chain security. Knowledge of containerization, vulnerability remediation, and scripting with Bash, Python, or similar tools. Strong problem-solving, communication, and cross-functional collaboration skills. Preferred Qualifications Experience with policy-as-code, secrets management, and runtime security tools. Knowledge of artifact scanning, SBOM practices, and open-source dependency governance. Experience with Terraform, Helm, or similar infrastructure automation tools. Familiarity with compliance, audit controls, and secure engineering standards. Relevant certifications such as CKA, CKS, Security+, CISSP, or cloud security certifications. What’s In It For You? Our Mission: Advancing Essential Intelligence. Our People: We're more than 35,000 strong worldwide—so we're able to understand nuances while having a broad perspective. Our team is driven by curiosity and a shared belief that Essential Intelligence can help build a more prosperous future for us all.From finding…