This job is no longer available
There are still lots of open positions. Let's find the one that's right for you.
IBM Quantum is an industry first initiative to build universal quantum computers for business, engineering and science. This effort includes advancing the entire quantum computing technology stack and exploring applications to make quantum broadly usable and accessible. With a worldwide network of Fortune 500 companies, academic institutions, researchers, educators, and enthusiasts, we are committed to driving innovation for our clients in the IBM Quantum Network and the Qiskit Community. The goal of this internship is to improve our CI/CD pipeline with security scanning tools to support developers adhere to Security Privacy by Design principles. One specific example of such a tool is checkov. In case checkov reports problems, this should lead to the pull request build being marked as failed, i.e. it should be a gating check during CI/CD execution. Alternatively, it can be explored to run checkov in regular intervals and open issues in the respective github repositories, so that the individual teams can plan necessary actions to fix the reported vulnerabilities. In a second part of the internship, the use of Open Policy Agent in IBM Quantum should be explored to determine whether this is a viable strategy to enforce certain rules as gating checks prior to the deployment to the staging - and eventually the production - environment. In order to evaluate Open Policy Agent, it should be deployed in our staging environment with a defined set of rules. As deployment is one of the last steps in our CI/CD pipeline, adequate and actionable means to communicate issues should be explored, so that a developer understands how to fix OPA-based problems and unblock deployments. At the end of the internship, the results should be presented to the team.
