DevSecOps Engineer

Berkadia is seeking a highly skilled DevSecOps Engineer to join our team. As a DevSecOps Engineer, you will play a critical role in shaping the future of the commercial real estate industry by ensuring the security and integrity of our cloud-based systems.

• Collaborate with cross-functional teams to integrate security into the software development lifecycle (SDLC) and CI/CD pipelines.
• Design, implement, and maintain secure infrastructure and cloud environments using automation tools such as Terraform, Ansible, or Puppet.
• Implement and configure security tools and technologies, including vulnerability scanners, intrusion detection/prevention systems (IDS/IPS), and security information and event management (SIEM) solutions.
• Conduct security assessments, penetration testing, and code reviews to identify and remediate security vulnerabilities.
• Monitor system logs and alerts for security incidents and respond promptly to mitigate risks and ensure compliance with industry standards and regulations.
• Develop and maintain documentation, standards, and procedures related to security and compliance.
• Provide guidance and support to development teams on secure coding practices, threat modeling, and security-related issues.
• Stay current with industry trends and best practices in DevSecOps, security automation, and cloud security, and contribute to continuous improvement efforts.

• Strong understanding of DevOps methodologies, software development principles, and agile practices.
• Hands-on experience with cloud platforms such as AWS, Azure, or Google Cloud, and proficiency in infrastructure as code (IaC) tools.
• Knowledge of security concepts and best practices, including encryption, access control, identity management, and secure coding principles.
• Experience with security tools and technologies, such as vulnerability scanners, IDS/IPS, SIEM solutions, and web application firewalls (WAFs).
• Familiarity with compliance standards and regulations, such as PCI DSS, HIPAA, GDPR, and industry frameworks like NIST Cybersecurity Framework or CIS Controls.
• Strong scripting and automation skills, with proficiency in languages such as Python, Bash, or PowerShell.
• Excellent problem-solving skills, attention to detail, and ability to work effectively in a fast-paced, dynamic environment.
• Strong communication and collaboration skills, with the ability to work effectively in cross-functional teams.
• 3+ years of experience in a DevOps or security engineering role, with a focus on implementing security in CI/CD pipelines and cloud environments.
• Experience with containerization technologies such as Docker and Kubernetes.

• Monthly paid volunteer hours and donation matching to benefit our communities.
• Employee Resource Groups that help you grow with us.
• Fertility and family planning services.
• Up to 12-weeks of fully paid parental leave.
• Mental health care, including free counseling sessions.
• We'll help fund your learning journey with generous tuition reimbursement.
• Pet insurance discounts.
• And more.

Berkadia is a leading commercial real estate company that is committed to innovation and excellence. We believe in creating a people-first culture where your career can take the long view. We are an equal opportunity employer and celebrate our employees' unique differences, which we believe drives personal and company-wide innovation.