Senior DevSecOps Engineer
CVS Health3 days ago
Galway, IrelandSenior
Responsibilities
- Provision and manage GCP projects, GKE clusters and namespaces, Cloud SQL, BigQuery, GCS, Cloud Composer, Dataproc, and Secret Manager.
- Manage Terraform infrastructure as code, Workload Identity Federation, service accounts, IAM permissions, AD groups, and Ping SAML/OIDC SSO integrations.
- Build and optimize GitHub Actions workflows, configure ArgoCD and deployment secrets, and support release promotion and deployment gates.
- Troubleshoot cloud networking, security, data, and deployment issues and provide Tier 2/3 production support, incident triage, root cause analysis, and post-incident documentation.
- Develop Grafana and GCP-native dashboards, integrate Prometheus metrics, establish logging and alerting standards, and support SLO and cost-management initiatives.
- Support BigQuery governance, data pipelines, Kafka/GCS streams, APIs, SFTP/SFG/WebTransport transfers, and secure GCP-to-vendor data movement.
- Coordinate security risk, compliance, vulnerability remediation, evidence collection, Snyk and Wiz findings, and production-readiness gates.
- Track project milestones, risks, dependencies, and blockers; provide leadership updates and mentor junior engineers across cross-functional teams.
Requirements
- 8+ years of experience in DevOps, platform, or SRE roles in enterprise environments.
- 5+ years of hands-on GCP experience, including GKE, Cloud Build, Cloud Run, Cloud SQL, BigQuery, GCS, Composer, Dataproc, Secret Manager, IAM, and VPC.
- 5+ years designing and managing CI/CD pipelines with GitHub Actions, Jenkins, or GitLab CI, plus 3+ years managing Terraform across multi-environment GCP deployments.
- Hands-on ArgoCD or equivalent GitOps experience, including Kubernetes-based deployments and Workload Identity Federation.
- Experience with Ping Identity SAML/OIDC, GCP IAM, AD groups, fine-grained BigQuery permissions, Secret Manager, and enterprise access management.
- Hands-on experience with Snyk Open Source and/or Wiz for vulnerability management and remediation.
- Strong Python and Bash scripting skills, plus experience with Kubernetes, GKE, Docker, Prometheus, Grafana, and GCP monitoring and logging.
- Experience with VPC Service Controls, VPN, firewall rules, DNS, BigQuery governance, secure file transfers, data pipelines, ServiceNow RITM/REQ workflows, and GRC evidence processes.
- Preferred qualifications include a GCP Professional DevOps Engineer or equivalent cloud certification, Azure experience, large-scale GitHub organization administration, Cloud Composer or Dataproc production experience, and healthcare, insurance, HIPAA, or SOX experience.
- Strong communication, cross-functional collaboration, vendor coordination, prioritization, and stakeholder-management skills are preferred.
Benefits
- The stated annual pay range is €50,000.00–€125,000.00.
- The application window is expected to close on 16/10/2026.
- The role operates in a large-scale enterprise healthcare environment and involves collaboration across Security, EDP, Network, Data Governance, and application teams.
Tech Stack
Apache AirflowApache KafkaAzureBashDockerGitHub ActionsGitLab CI/CDGoogle BigQueryGoogle CloudGoogle Cloud PlatformGrafanaJenkinsKubernetesPrometheusPythonTerraform
About CVS Health
CVS Health is a U.S. health care company that operates thousands of retail pharmacies, runs the CVS Caremark pharmacy benefits manager, and owns the Aetna health insurance business. It sells prescriptions, retail health goods, and insurance plans, and provides primary and urgent care through MinuteClinic and other services for consumers, employers, and government programs. Founded in 1963 and headquartered in Woonsocket, Rhode Island, it is a public company traded on the NYSE.