DevSecOps Engineer - #1450

Responsibility

• Responsible for designing, automating, and maintaining secure, scalable, and resilient infrastructure and deployment pipelines:
• Develop automation capabilities to deploy, manage, monitor, and maintain applications and infrastructure.
• Design and maintain CI/CD pipelines for application deployment and release management.
• Implement infrastructure-as-code and environment automation practices.
• Manage cloud resources and platform services.
• Develop and maintain CI/CD tooling and automation to support software build, testing, integration and release processes
• Monitor and optimize platform availability, performance, utilisation, reliability, and operational health
• Implement security controls and ensure compliance with government security requirements.
• Plan, implement, and monitor system security architecture, including threat and risk assessments.
• Conduct vulnerability assessments, system hardening, security reviews, and remediation activities.
• Implement disaster recovery, backup, and business continuity measures.
• Investigate, troubleshoot, and resolve system, application, and infrastructure issues
• Collaborate closely with developers to integrate security throughout the software development lifecycle
• Coordinate and work together with othe

r members of the team.

Experience & Skills Needed

• Strong understanding of Software Development Lifecycle (SDLC), CI/CD, Test-Driven Development (TDD) and DevSec Ops practices.
• Experience designing, deploying, and supporting cloud-native applications and infrastructure on AWS. Experience with GCC environment is advantageous.
• Proficiency in at least two programming/scripting languages (Bash, PowerShell, Python, Java script, or Java).
• Experience with infrastructure￾as-code and automation tools such as Terraform, Ansible, or equivalent technologies.
• Experience with containerization and orchestration technologies including Docker and Kubernetes.
• • Experience with source code management, GitLab workflows, and CI/CD platforms.
• Experience implementing monitoring, logging and observability solutions to support platform reliability and operational excellence.
• Knowledge of application security and cloud security, secure coding practices, and DevSec Ops principles.
• Hands-on experience with vulnerability management, security assessments, system hardening and remediation activities.
• Familiarity with cloud-native and Cloud Native Computing Foundation (CNCF) tools (Prometheus, Helm, Argo CD, Istio, Gatekeeper, Cross plane).
• Familiarity with enterprise security and secrets management solutions (Hashi Corp Vault, Tenable, Fortify, Sona type Nexus IQ, AWS security services).
• Experience with AWS services related to identity and access management, networking, monitoring, container platforms, and security