Devsecops Engineer

Job Title: DevSecOps Engineer (Contract)Location: Melbourne, AustraliaEmployment Type: Contract (3 to 6 months)
About the RoleWe are seeking an experienced DevSecOps Engineer to design, build, and operate internal developer platforms and CI/CD infrastructure that enable secure, scalable, and reliable software delivery. The ideal candidate will possess strong expertise in AWS, Kubernetes, CI/CD pipelines, GitHub platform engineering, and security best practices.
Key ResponsibilitiesJFrog Platform (Artifactory, Xray, JAS)Design and deploy Artifactory Pro in an Active/Active High Availability environment.Implement federated repository architecture.Configure TLS encryption, pod-to-pod encryption, and RBAC.Manage JFrog resources using Infrastructure as Code (Terraform).Integrate Xray vulnerability scanning with JFrog Advanced Security (JAS).Collaborate with JFrog Support to resolve complex platform issues.Perform Artifactory and Xray upgrades.Prepare documentation and support knowledge transfer activities.Kubernetes & AWS EKS PlatformManage and enhance AWS EKS clusters supporting multiple platform teams.Lead the migration from Cluster Autoscaler to Karpenter.Provision ARM64 (Graviton) worker nodes for multi-architecture workloads.Onboard new applications onto EKS.Automate the scaling down of idle non-production workloads to optimize cloud costs.CI/CD Platforms (Jenkins & GitHub Actions)Maintain and upgrade enterprise Jenkins environments.Design and implement multi-architecture container image build pipelines.Develop proof-of-concept solutions for migrating Jenkins pipelines to GitHub Actions.GitHub Platform EngineeringDesign and operate GitHub self-hosted runner infrastructure using Actions Runner Controller (ARC) on EKS.Implement monitoring, alerting, and security hardening measures.Build automated GitHub role mapping using Application IDs and CMDB data.Security, Compliance & GovernanceRemediate GitHub Advanced Security (GHAS) secret scanning alerts.Support security assurance and compliance activities.Ensure adherence to security standards and governance requirements.Own the full lifecycle of solutions, from design and stakeholder approval to deployment and operational handover.Required Skills & ExperienceStrong experience with AWS, Kubernetes, and Amazon EKS.Hands-on expertise with JFrog Artifactory, Xray, and JAS.Proficiency in Terraform and Infrastructure as Code.Experience with Jenkins and GitHub Actions.Knowledge of GitHub self-hosted runners and Actions Runner Controller (ARC).Experience with container technologies and multi-architecture deployments.Strong understanding of DevSecOps principles, cloud security, and compliance frameworks.Excellent stakeholder management and communication skills.