DevOps Engineer, Professional II

At Zebra, we are a community of innovators who come together to create new ways of working. United by curiosity and a culture of caring, we develop smart solutions that anticipate our customer’s and partner’s needs and solve their challenges. Being part of Zebra Nation means you are seen, heard, valued, and respected. Drawing from our unique perspectives, we collaborate to deliver on our purpose. Here you are part of a team pushing boundaries today to redefine the work of tomorrow for organizations, their employees, and those they serve.   You’ll have opportunities to learn and lead in a forward-thinking environment, defining your path to a fulfilling career while channeling your skills toward causes you care about—locally and globally. Come make an impact every day at Zebra.

This is a mid-to-senior level DevSecOps Engineer role focused on embedding and automating security throughout the software development lifecycle (SDLC). The primary objective is to build secure CI/CD pipelines, manage vulnerabilities, and foster a "security-first" culture across development and operations teams. The ideal candidate will have strong expertise in Google Cloud Platform (GCP), containerization, and scripting, bridging the gap between infrastructure automation and regulatory compliance.

Security Integration : Integrate security practices into the DevOps pipeline, ensuring that security is considered at every stage of the software development lifecycle. Automation : Develop and maintain automated security testing tools and scripts to identify vulnerabilities early in the development process. Collaboration : Work closely with development, operations, and security teams to promote a DevSecOps culture and ensure secure coding practices are followed. Risk Management : Identify, assess, and prioritize security risks and work with teams to mitigate them. Compliance : Ensure that the DevSecOps processes comply with relevant security standards and regulations (e.g., ISO 27001, NIST, GDPR). Incident Response : Assist in the development and implementation of incident response plans and conduct security drills to ensure readiness. Monitoring and Reporting : Implement continuous monitoring solutions to detect and respond to security incidents and generate reports for management and stakeholders. Training and Awareness : Conduct training sessions to raise awareness about security best practices among development and operations teams. Tool Management : Evaluate, implement, and manage security tools for vulnerability scanning, code analysis, and security monitoring. Documentation : Maintain comprehensive documentation of security policies, procedures, and incidents.

Education : Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field. Experience : Minimum of 5 years of experience in DevOps, DevSecOps, or a related field. Proven experience with CI/CD tools (e.g., Jenkins, GCP Deployment manager). Strong understanding of security principles and practices, including threat modeling and vulnerability management. Technical Skills : Proficiency in scripting languages (e.g., Python, Bash, PowerShell). Experience with GCP cloud platforms. Familiarity with security tools (e.g., Nucleus , Orca). Knowledge of containerization and orchestration tools (e.g., Docker, Kubernetes, CloudRun). Certifications : Relevant certifications such as GCP or AWS Certified Security are preferred. Soft Skills : Excellent problem-solving and analytical skills. Strong communication and interpersonal skills. Ability to work collaboratively in a fast-paced environment.

Experience with Infrastructure as Code (IaC) tools such as Terraform or CloudFormation. Knowledge of microservices architecture and related security challenges. Understanding of Zero Trust security models and practices.

We understand the importance of work-life