DevSecOps Automation Engineer

What You Will Do

Build and maintain GitHub Actions workflows for self-service provisioning of infrastructure, secrets, and IAM roles using Terraform.

Develop reusable Terraform modules that encapsulate compliant patterns for deploying GCP, Azure, and on-prem infrastructure (VMs, networks, K8s clusters, etc.).

Integrate with HashiCorp Vault to securely inject secrets into pipelines and support runtime retrieval for VMs and services.

Support the GitHub repository onboarding process by automating bindings between repositories, identity pools, and service accounts.

Enable secure OIDC-based pipeline authorization (e.g., GCP Workload Identity Federation, Azure Federated Credentials).

Drive automation for certificate-based authentication for on-prem VMs accessing Vault and other internal services.

Collaborate with platform, IAM, and security teams to implement compliant patterns for secrets, identity, and access governance.

Design self-service onboarding workflows for developers and application teams across environments (EDP-GT, EDP-XL, TD Universe).

Contribute to internal documentation and Confluence living strategies to ensure transparency and onboarding clarity.

Skills and Experience You Will Need

Required:

5+ years of experience in DevOps, SRE, or Platform Engineering roles

Advanced experience with Terraform (including module design, state management, and CI integration)

Proficiency with GitHub Actions for CI/CD pipelines and automation workflows

Deep knowledge of cloud IAM models (especially GCP Workload Identity Federation and Azure Entra ID)

Experience with HashiCorp Vault for secrets management and automated secret injection

Understanding of cert-based authentication, secure software supply chain, and compliance automation

Familiarity with Kubernetes, container-based deployments, and cloud-native network/security controls

Comfortable working in multi-cloud environments (Azure, GCP) and hybrid setups (VMC2, on-prem)

Strong scripting skills (e.g., Bash, Python, or Go)

Education:

Undergraduate degree or Technical Certificate (Graduate degree preferred)

Who We Are

GalaxE, now Endava, is a professional IT services firm that specializes in platform-driven solutions and the use of automation to achieve enterprise business transformation and mission-critical change for some of the largest companies in the world. Using our proprietary solution set, GxFource®, we apply machine learning techniques and predictive analytics tools as part of a broad artificial intelligence strategy that provides effective impact and data-driven business transformation.

Since its founding, GalaxE has been dedicated to advancing the benefits of technology. Recently, we have joined forces with Endava, to offer our employees global exposure and enhanced opportunities. As we continue that legacy and look to the future, a focus on business enablement through agile, cost-efficient, and effective integration of people, process, and technology anchors our success. We revolutionize change in the costs of doing business that transform companies and their ability to leap beyond the competition.

We value people and are committed to diversity and inclusion where our employees are made to feel comfortable and are encouraged to be authentic.

We are always looking for passionate, entrepreneurial-minded innovators and disrupters; game-changers that take ownership of the work they produce and bring it each and every day. Working with like-minded team members you will get a chance to discover, develop, and use cutting-edge technologies to transform the way we deliver creative business solutions.

Sound like you? Join us and find out for yourself what it means for you, and your career, to be part of the GalaxE team. Let’s build something, together.

*Equal Opportunity Employer/Veterans/Disabled

** Pay is based on several factors including market location and may vary depending on actual job-related knowledge, skills, and experience.

Physical Requirements:

Prolonged periods of remaining stationary at a desk and working on a computer

Must be able to lift to 15 lbs., as needed

Must be able to work on-site (corporate/client offices), as needed (not applicable for 100% remote roles)

Occasionally required to bend, kneel, crouch, and reach overhead.

Hand-eye coordination necessary to operate computers and various pieces of office equipment.

Specific vision abilities required include close vision, the ability to tolerate fluorescent lighting, and the ability to adjust focus.

Employees must be able to perform the physical requirements of the position satisfactorily and, if requested, reasonable accommodations will be made to enable employees requiring accommodations to perform the essential functions of their jobs, absent undue hardship.

For more information, please visit

Solutions