job summary: Randstad Digital is hiring and we're looking for someone like YOU to join our team! If you are seeking a new opportunity, looking to grow in your career, or you know someone who is - we want to hear from you! Take a look at the below opportunity, or feel free to visit RandstadUSA.com to view and apply. location: Charlotte, North Carolina job type: Contract salary: $64.53 - 69.53 per hour work hours: 8am to 5pm education: Bachelors responsibilities: Key Responsibilities - Design, build, and maintain CI/CD pipelines using GitHub Actions (reusable/caller workflow pattern) and Harness CD (rolling, canary, and blue-green deployment strategies). - Implement event-driven deployment triggers (e.g., Kafka EDA bus integration between CI and CD). - Champion shift-left security by embedding SAST, SCA, secret scanning, and code quality gates at PR time, ensuring vulnerabilities are caught before merge, not after deployment. - Integrate and manage Checkmarx (SAST), Black Duck (SCA/license compliance), SonarQube (code quality/security hotspots), and GitHub Secret Scanning into CI pipelines as hard-gate merge checks. - Perform container image scanning using Prisma Cloud and Artifactory Xray; triage and remediate OS-level and application-layer CVEs. - Implement and enforce artifact signing (GPG) and integrity verification as part of the release pipeline. - Manage vulnerability lifecycle from scan ingestion through ServiceNow AVR (Application Vulnerability Repository) to remediation closure. - Partner with cross functional teams to improve system reliability, performance, and deployment workflows. - Collaborate with AppSec and SOC teams on findings from Splunk Enterprise Security rules and AppDynamics threat detection (OWASP attack patterns). - Deploy, manage, and troubleshoot workloads on OpenShift Container Platform (OCP) across multi-data-center environments (DEV, UAT, PROD, DR). - Author and maintain Helm charts with environment-specific value overlays, including templates for Deployments, StatefulSets, Services, Ingress/Routes, HPA, PodDisruptionBudgets, and NetworkPolicies. - Manage Istio service mesh configurations for canary traffic shifting and mTLS enforcement. - Automate TLS/mTLS certificate lifecycle using Venafi + cert-manager with auto-renewal policies. - Build and maintain monitoring stacks using Splunk, Prometheus, Grafana, and AppDynamics for APM, error tracking, and performance baselines. - Troubleshoot application issues, resolve incidents, and manage ticket requests across Jira projects in a timely manner. - Develop and maintain automation scripts using Python, Bash/Shell, PowerShell, or Perl. - Contribute to Agile ceremonies and participate in continuous improvement initiatives. qualifications: Required Qualifications - 10+ years of overall IT experience, including 5+ years as a DevOps/DevSecOps Engineer. - Strong hands-on experience with GitHub Actions, building reusable workflows, composite actions, and matrix strategies for multi-language CI pipelines. - Hands-on experience with Harness CD or equivalent enterprise CD platform (pipeline-as-code, environment promotion, approval gates, rollback strategies). - Production experience operating OpenShift Container Platform (OCP) or Kubernetes, including Helm chart authoring, namespace administration, RBAC, SCC enforcement, and troubleshooting pod/node issues. - Deep understanding of shift-left security tooling: SAST (Checkmarx or equivalent), SCA (Black Duck/Snyk), secret scanning, and container image scanning (Prisma Cloud/Trivy/Xray). - Proficiency in at least two scripting languages: Python, Bash/Shell, PowerShell, or Perl. - Experience with Java-based environments (Spring Boot, Gradle) and SQL-driven systems (Oracle preferred). - Hands-on experience with HashiCorp Vault or equivalent secrets management platform. - Demonstrated ability to troubleshoot complex, multi-tier application issues across containers, networking, databases, and middleware. - Strong understanding of GitFlow branching strategies, pull request workflows, mandatory peer review, and code coverage enforcement. - Strong communication skills and experience working in an Agile development environment. Preferred Qualifications - Experience in financial services, banking, or other regulated industries (PCI-DSS, SOX, AML/KYC compliance awareness). - Exposure to AI/ML technologies or Python based automation. - Familiarity with JFrog Artifactory for artifact management, internal registry proxying, and Xray policy enforcement. - Hands-on experience with Splunk (log analysis, ES correlation rules) or Grafana/Prometheus for observability. - Experience contributing to governance-as-code frameworks or platform engineering teams. - Familiarity with CI/CD pipelines, cloud platforms, or containerization tools. Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.At Randstad Digital, we welcome people of all abilities and want to ensure that our hiring and interview process meets the needs of all applicants. If you require a reasonable accommodation to make your application or interview experience a great one, please contact HRsupport@randstadusa.com. Pay offered to a successful candidate will be based on several factors including the candidate's education, work experience, work location, specific job duties, certifications, etc. In addition, Randstad Digital offers a comprehensive benefits package, including: medical, prescription, dental, vision, AD&D, and life insurance offerings, short-term disability, and a 401K plan (all benefits are based on eligibility). This posting is open for thirty (30) days.