DevSecOps Engineer
Job Description
Key Responsibilities
Design, develop, and sustain secure, scalable, and resilient infrastructure solutions across data centers and Amazon Web Services (AWS) cloud platforms.
Create automation scripts and tools utilizing Bash, PowerShell, Python, Go, or other scripting languages to streamline operations.
Establish, configure, and oversee Continuous Integration/Continuous Deployment (CI/CD) pipelines, embedding security checks within build, testing, and deployment workflows.
Automate infrastructure provisioning and configuration management through Terraform and Ansible frameworks.
Manage containerized applications leveraging Docker and AWS container services such as Amazon ECS and Fargate.
Implement infrastructure monitoring, logging, and observability solutions using Grafana, Amazon CloudWatch, and OpenTelemetry to ensure system health and performance.
Conduct vulnerability assessments, security hardening measures, threat and risk evaluations, and troubleshoot security incidents.
Enforce security controls, secrets management, access policies, and secure configurations across cloud infrastructure and associated applications.
Support disaster recovery strategies, backup and restore procedures, high availability architectures, and business continuity plans.
Diagnose and resolve complex infrastructure and application issues, participating in on-call support as necessary.
Maintain compliance with relevant security standards and organizational policies to ensure regulatory adherence.
Qualifications and Skills
Academic background with a Degree or Diploma in Computer Science, Information Technology, Computer Engineering, or an equivalent field.
Deep understanding of the Software Development Life Cycle (SDLC), CI/CD methodologies, secure software practices, and DevSecOps principles.
Practical experience working with AWS cloud services and hybrid or multi-data-center environments.
Proficiency in at least three programming or scripting languages such as Bash, PowerShell, Python, or Go.
Hands-on experience with Git and source control platforms including GitLab, GitHub, or Bitbucket.
Experience with Terraform, Ansible, Docker, and AWS services like ECS and Fargate.
Knowledge of virtualization platforms such as VMware, KVM, or Hyper-V.
Experience utilizing monitoring tools, vulnerability scanners, and security tools for infrastructure protection.
Solid understanding of networking fundamentals, including firewalls, subnets, routing, access controls, and system hardening techniques.
Experience managing backups, disaster recovery plans, and RPM-based software packaging.
Excellent analytical, troubleshooting, communication, and team collaboration skills.
Additional Preferred Qualifications
Experience working with security tools and platforms such as HashiCorp Vault, Tenable, Fortify, Sonatype Nexus IQ, Elasticsearch, or AWS security services.
Familiarity with ISO 27001, NIST standards, CIS Benchmarks, and other security compliance frameworks.
Relevant certifications including AWS Security Specialty, CISSP, CISM, or CREST certifications.
Experience working within government agencies, financial sectors, or other highly regulated industries.
Knowledge of API security protocols, Zero Trust security architecture, secure service-to-service communication, AWS VPC Lattice, and AWS Service Connect.