DevSecOps Engineer

Key Responsibilities: 

• Responsible for designing, automating, and maintaining secure, scalable, and resilient infrastructure and deployment pipelines.
• Develop automation capabilities to deploy, manage, monitor, and maintain applications and infrastructure.
• Design and maintain CI/CD pipelines for application deployment and release management.
• Implement infrastructure-as-code (IaC) and environment automation practices.
• Manage cloud resources and platform services.
• Develop and maintain CI/CD tooling and automation to support software build, testing, integration, and release processes.
• Monitor and optimize platform availability, performance, utilization, reliability, and operational health.
• Implement security controls and ensure compliance with client security requirements.
• Plan, implement, and monitor system security architecture, including threat and risk assessments.
• Conduct vulnerability assessments, system hardening, security reviews, and remediation activities.
• Implement disaster recovery, backup, and business continuity measures.
• Investigate, troubleshoot, and resolve system, application, and infrastructure issues.
• Collaborate closely with developers to integrate security throughout the software development lifecycle (SDLC).
• Coordinate and work effectively with other members of the team.

Experience & Skills Needed:

• Strong understanding of the Software Development Lifecycle (SDLC), CI/CD, Test-Driven Development (TDD), and DevSecOps practices.
• Experience designing, deploying, and supporting cloud-native applications and infrastructure on AWS. Experience with GCC environments is an advantage.
• Proficiency in at least two programming or scripting languages, such as:
  - Bash
  - PowerShell
  - Python
  - JavaScript
  - Java
• Experience with Infrastructure as Code (IaC) and automation tools such as Terraform, Ansible, or equivalent technologies.
• Experience with containerization and orchestration technologies, including Docker and Kubernetes.
• Experience with source code management, GitLab workflows, and CI/CD platforms.
• Experience implementing monitoring, logging, and observability solutions to support platform reliability and operational excellence.
• Knowledge of application security, cloud security, secure coding practices, and DevSecOps principles.
• Hands-on experience with vulnerability management, security assessments, system hardening, and remediation activities.
• Familiarity with cloud-native and Cloud Native Computing Foundation (CNCF) tools, including:
  - Prometheus
  - Helm
  - ArgoCD
  - Istio
  - Gatekeeper
  - Crossplane
• Familiarity with enterprise security and secrets management solutions, including:
  - HashiCorp Vault
  - Tenable
  - Fortify
  - Sonatype Nexus IQ
  - AWS Security Services
• Experience with AWS services related to identity and access management (IAM), networking, monitoring, container platforms, and security.