Latest DevOps Hiring Trends Every Fresher Should Know

# .github/workflows/reusable-build.yml
name: reusable-build
on:
  workflow_call:
    inputs:
      python-version:
        type: string
        default: '3.12'
jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-python@v5
        with:
          python-version: ${{ inputs.python-version }}
      - run: pip install -r requirements.txt
      - run: pytest -q

# A service repo uses it with:
# jobs:
#   ci:
#     uses: my-org/platform/.github/workflows/reusable-build.yml@main

# modules/standard-bucket/main.tf
variable "name" { type = string }
variable "team" { type = string }

resource "aws_s3_bucket" "this" {
  bucket = var.name
  tags   = { Team = var.team, ManagedBy = "terraform" }
}

resource "aws_s3_bucket_public_access_block" "this" {
  bucket                  = aws_s3_bucket.this.id
  block_public_acls       = true
  block_public_policy     = true
  ignore_public_acls      = true
  restrict_public_buckets = true
}

output "arn" { value = aws_s3_bucket.this.arn }

name: security
on: [pull_request]
jobs:
  scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with: { fetch-depth: 0 }
      - name: Secret scan
        uses: gitleaks/gitleaks-action@v2
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      - name: Dependency audit
        run: |
          pip install pip-audit
          pip-audit -r requirements.txt
      - name: IaC scan
        run: |
          pip install checkov
          checkov -d infra/ --quiet

#!/usr/bin/env bash
# Scan a built image and fail on high or critical findings
set -euo pipefail
IMAGE=myapp:${GIT_SHA:-local}

docker build -t "$IMAGE" .
docker run --rm -v /var/run/docker.sock:/var/run/docker.sock \
  aquasec/trivy:latest image --severity HIGH,CRITICAL --exit-code 1 "$IMAGE"
echo "image scan passed"

# pip install boto3
import boto3

ec2 = boto3.client("ec2", region_name="ap-south-1")
REQUIRED = {"Team", "Environment"}

for r in ec2.describe_instances()["Reservations"]:
    for inst in r["Instances"]:
        tags = {t["Key"] for t in inst.get("Tags", [])}
        missing = REQUIRED - tags
        if missing:
            print(inst["InstanceId"], "missing tags:", sorted(missing))
print("tag check complete")

# Generated (problems marked):
# FROM python:latest            <- unpinned tag
# COPY . .                       <- copies secrets and junk
# RUN pip install -r requirements.txt
# CMD python app.py              <- runs as root

# Reviewed version:
FROM python:3.12-slim
WORKDIR /app
COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt
COPY app/ ./app/
RUN useradd --create-home appuser
USER appuser
CMD ["python", "-m", "app"]

Weeks 1-2   Linux, networking, Git fundamentals
Weeks 3-4   Docker and a CI pipeline with tests
Weeks 5-6   Terraform: write one reusable module
Weeks 7-8   Kubernetes basics; deploy the app
Week 9      Add secret, dependency and image scans to CI
Week 10     Monitoring: metrics, one alert, one runbook
Week 11     Cost: tags, budget alert, cleanup script
Week 12     Portfolio write-up and interview practice

Project: Mini internal platform

- Reusable CI workflow used by two sample services
- Terraform module for a standard, secure bucket
- Security scans in every pull request
- Kubernetes deployment with health checks
- Prometheus alert with a runbook
- Cost tags and a cleanup script
- README explaining each trend it demonstrates

Every two weeks, read 10 current DevOps listings. Note:
- Cloud provider and IaC tool
- Kubernetes required?
- Security tools or DevSecOps mentioned?
- Platform engineering or internal tooling mentioned?
- Cost or FinOps mentioned?
- AI tools mentioned?
Adjust your plan to what appears most.