Az álláshirdetés lejárt.
Modern threats to the software supply chain require advanced security measures to ensure our build and test infrastructure remains protected. Through previous threat modeling we have identified opportunities to expand and harden the security posture within our pipelines and build agents to reduce risk. This contract will be focused on executing these tasks identified to improve security measures controlling access to our CI/CD pipelines and build environments. You will partner with the company´s Product Security experts and the teams in the Delivery Pipeline Services realm to review, coordinate, and execute these tasks.
Skill Requirements
- Senior experience level
- Azure DevOps Repos and Pipelines
- Python expert
- DevOps Experience
- Infrastructure as Code techniques (Ansible a plus)
- Hypervisors/virtualization (Proxmox a plus)
- Containers
- Linux OS knowledge
- Agile Development
- Secure Development Lifecycle (SDLC) Software security best practices
- Digital signing services
Job Requirements
- Afternoon and early evening core working hours to overlap with AMER region
- May be fully remote
- Will need Azure DevOps basic account and access to DevCentral project
Training/Support
- Dedicated mentor provided
- Dedicated project manager and supervisor
- Estimation for Onboarding: 2 weeks
Development/Deliverables
- Review release pool policy workflow and implement access controls to limit user access to release agents
- Produce a High-Level Design document for area tech lead approval
- Access controls will be implemented in code
- Policy will be documented in Azure DevOps wiki
- Estimated time: 6 weeks
- Propose and implement an enforcement mechanism to limit build agent access to only approved repositories
- Produce a High-Level Design document for area tech lead approval
- Ensure alignment with third-party dependency inclusion workflows
- Policy will be documented in Azure DevOps wiki
- Automated tests will be written as part of the feature completion criteria
- Estimated time: 10 weeks