Senior DevSecOps Pipeline & Policy Engineer

• Department: Engineering / Platform Engineering Pipeline Architecture: Design, author, and maintain scalable Jenkins declarative and scripted pipelines to support diverse application stacks. Shared Libraries (Groovy): Develop and maintain enterprise Jenkins Shared Libraries in Groovy to standardize build processes and reduce pipeline code duplication across teams. Custom Jenkins Plugins: Write, enhance, and manage custom Jenkins plugins to extend platform capabilities and align CI/CD functionality with evolving business needs. Shift-Left Security: Integrate robust security scanning tools (SAST, DAST, Software Composition Analysis) directly into pipelines (e.g., SonarQube, Cycode, Curation).

· Policy Enforcement & Auditing: Implement automated gates to enforce code quality, test coverage, and vulnerability thresholds before code can be merged or deployed.

Generate automated audit trails for compliance.