Job Title: Lead DevSecOps Engineer
Location: Cleveland, OH | Pittsburgh, PA | Dallas, TX – (5 days Onsite)
Employment Type: Full Time
About VLink:
Started in 2006 and headquartered in Connecticut, VLink is one of the fastest growing digital technology services and consulting companies. Since its inception, our innovative team members have been solving the most complex business, and IT challenges of our global clients.
Position Description:
We are seeking a Lead DevSecOps Engineer to champion secure‐by‐design engineering across our cloud and application platforms. You will lead the integration of security into CI/CD pipelines, architect secure cloud environments, and guide teams in adopting modern DevSecOps practices.
Required Qualifications:
- 10+ years of hands-on DevSecOps or security automation engineering in enterprise environments
- Deep Jenkins experience in production at enterprise scale: shared library development, pipeline-as-code, credential management, plugin administration, and troubleshooting in multi-team environments
- Bitbucket administration and pipeline integration: branch permissions, PR workflow configuration, webhook-driven automation, and Jenkins integration patterns
- Artifactory: dependency management, artifact promotion, repository configuration, and security scanning integration
- Python at production quality: REST API integrations, data pipeline code, and automation scripts that GCC engineers will maintain
- Ansible: writing and maintaining playbooks for OS-level and middleware-level remediations on Linux and Windows
- Terraform: writing modules for infrastructure configuration changes with proper state management and change governance
- Policy-as-code implementation: OPA/ Conftest or equivalent enforcing security standards within CI/CD pipelines at runtime
- REST API integration: production integrations against Archer GRC, ServiceNow, and Jira APIs
- Container platform operations: Docker and OpenShift/OCP specifically including image management, CaaS operations, and container security scanning
- Vulnerability management platform experience: Archer GRC, Tanium, or Security Center in an operational day-to-day capacity
- CyberArk secrets management: integrating CyberArk with CI/CD pipelines and enforcing no-hardcoded-credentials standards
- Banking or financial services environment: CAB process, change window management, production deployment governance, and audit evidence requirements in a regulated context. Non-negotiable for this engagement.
Preferred Qualifications
- Direct client environment experience: familiarity with Converge, Micron framework, CaaS/OCP configuration, or BTI Retail/Lending mnemonic structure
- Sysdig operational experience: container vulnerability scanning, alert configuration, and downstream triage integration
- Tanium experience: endpoint detection, vulnerability data extraction, and API integration
- LangChain or AI agent pipeline experience: Phase 2 introduces an AI triage engine and engineers who can contribute to its operational integration will be more effective
- Jira administration and Confluence technical documentation at production quality
Skills:
- Container Technology
- Jenkins
- Python
- Terraform
- Vulnerability coordination
- Ansible
- Bitbucket
Benefits:
- Competitive compensation.
- Comprehensive insurance options.
- Matching contributions through the 401(k) plan and the share purchase plan.
- Paid time off for vacation, holidays, and sick time.
- Paid parental leave.
- Learning opportunities and tuition assistance.
- Wellness and Well-being programs.
Employment Practices:
EEO, ADA, FMLA Compliant
VLink is an equal opportunity employer committed to fostering an inclusive environment where diversity is celebrated. All qualified applicants will be considered for employment without regard to race, colour, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status. Employment is contingent upon successful completion of a background check. Applicant information will be handled in accordance with VLink's privacy policy.