DevSecOps Engineer

About the role

This DevSecOps position brings security and operations together so that security is integrated into every stage of DevOps projects. The engineer works within Agile development teams to automate deployment, monitoring and infrastructure management in a cloud environment, and defines and implements the standards for deployment and monitoring for a customer.

Key responsibilities

• Provide hands-on technical expertise and support for general DevOps tasks.
• Build and configure delivery environments supporting CD/CI tools, and create scripts and templates to automate infrastructure provisioning.
• Work with the development team to build an automated CI/CD system, and with vendors and other IT staff to resolve problems.
• Monitor and support installed systems and infrastructure, and develop custom scripts to improve efficiency and reduce manual intervention.
• Contribute to the design of information and operational support systems, and organize high availability of systems and infrastructure.
• Install, configure, test and maintain operating systems, application software and system management tools.
• Oversee security, backup and redundancy strategies, and evaluate application performance and bottlenecks.
• Mentor junior infrastructure engineers and promote secure development practices.

Required profile

• BS or MS degree in Computer Science, Engineering or a related field.
• Demonstrated experience with secure development, coding and engineering practices, and a security-first mindset.
• Experience deploying and monitoring web applications in AWS.
• Ability to work in an open team environment and communicate effectively with peers and clients.

Required skills

• Jenkins, Docker, Java, Python, Ruby, Perl, YAML scripting, SAST and DAST.
• Infrastructure as Code and CI/CD pipeline automation from code commit to production.
• Solid experience with UNIX/Linux installation, configuration and troubleshooting.
• Networking knowledge (OSI model, TCP/IP) and scripting (shell, Perl, Ruby, Python, Go, Groovy, Helm).
• Application stack administration and tuning (Tomcat, JBoss, Apache, Ruby, NGINX).