Senior CI/CD Security Engineer- 7+ yrs- New York, New York- Onsite

Job Description :

GitLab Dedicated & Pipeline Hardening: Building CI/CD pipelines in GitLab Dedicated (GovCloud) using OIDC workflows and enforcing SLSA Level 3 supply chain standards. HashiCorp Vault Integration: Configuring Vault OIDC token minting, secrets rotation (Vault / Secrets Manager), and workspace dynamic role generation. Supply Chain Security & Scanning Gates: Generating SBOMs (SPDX/CycloneDX), container image signing, and configuring scanning gates with Checkov, Trivy, and TFLint. Zero-Static-Keys Enforcement: Building completely credential-less deployment pipelinesCertifications: HashiCorp Certified (Vault / Terraform) or Certified DevSecOps Professional.