Senior DevSecOps Pipeline & Policy Engineer

• Focus: SDLC Automation, Security Scanning, Shared Libraries, and Compliance Audits
• Department: Engineering / Platform EngineeringPipeline Architecture: Design, author, and maintain scalable Jenkins declarative and scripted pipelines to support diverse application stacks.Shared Libraries (Groovy): Develop and maintain enterprise Jenkins Shared Libraries in Groovy to standardize build processes and reduce pipeline code duplication across teams.Custom Jenkins Plugins: Write, enhance, and manage custom Jenkins plugins to extend platform capabilities and align CI/CD functionality with evolving business needs.Shift-Left Security: Integrate robust security scanning tools (SAST, DAST, Software Composition Analysis) directly into pipelines (e.g., SonarQube, Cycode, Curation).

·Policy Enforcement & Auditing: Implement automated gates to enforce code quality, test coverage, and vulnerability thresholds before code can be merged or deployed. Generate automated audit trails for compliance.