DevSecOps & Infrastructure Security Engineer

About the role

New Mind AI is seeking an experienced DevSecOps & Infrastructure Security Engineer to protect its SaaS platforms, on‑premises deployments and Kubernetes/OpenShift environments. You will own security initiatives from assessment through remediation, working closely with engineering teams to embed security into the software development lifecycle.

Key responsibilities

• Integrate and continuously improve security controls across CI/CD pipelines, including SAST, SCA, secret scanning, container/IaC scanning and SBOM generation.
• Perform security assessments of Kubernetes/OpenShift clusters, enhance RBAC, Pod Security Standards, NetworkPolicies and implement Policy‑as‑Code with tools such as Kyverno or OPA Gatekeeper.
• Harden Linux production systems, manage TLS/mTLS, PKI and certificate lifecycles, and contribute to Zero‑Trust and Least‑Privilege architectures.
• Operate secrets‑management solutions (CyberArk, HashiCorp Vault) and enforce secure secret distribution and rotation.
• Prioritize vulnerabilities based on exploitability and business impact, investigate incidents and participate in root‑cause analysis.

Required profile

• 5+ years of professional experience in DevSecOps, infrastructure or cloud security.
• Strong Linux and network‑security knowledge with hands‑on production experience in Kubernetes or OpenShift.
• Proven ability to embed security into CI/CD pipelines and to guide engineering teams on secure design.

Required skills

• Linux, Kubernetes, OpenShift, Helm
• CI/CD security tools: Trivy, SonarQube, Semgrep
• Policy & supply‑chain tools: Kyverno, OPA Gatekeeper, Cosign
• Runtime security: Falco, Tetragon
• Secrets management: CyberArk, HashiCorp Vault
• Automation & IaC: Ansible, Terraform
• Monitoring & SIEM: Splunk