Cloud DevSecOps Engineer

Job Description

Cloud Platforms: AWS (e.g., EC2, S3, Lambda, IAM, CloudFormation, CloudWatch), Azure (e.g., Compute, Storage, Networking, Security Center, ARM Templates, Azure Monitor) Containerization and Orchestration: Docker, Kubernetes (e.g., EKS, AKS, GKE) Infrastructure as Code (IaC): Terraform, CloudFormation, ARM Templates, or similar tools. Configuration Management: Ansible, Chef, Puppet, or similar tools. Any of it is ok. CI/CD Tools: Jenkins, GitLab CI/CD, GitHub Actions, CircleCI, or similar platforms. Scripting: Python, Bash, or other relevant scripting languages. Security Best Practices: Experience implementing security controls and compliance frameworks (e.g., CIS, NIST). Understanding of OWASP principles. Monitoring and Logging: Prometheus, Grafana, ELK stack (Elasticsearch, Logstash, Kibana), Splunk, CloudWatch Logs, Azure Monitor Logs, or similar tools. Networking: Understanding of TCP/IP, DNS, load balancing, firewalls, VPNs. Operating Systems: Linux (essential). Version Control: Git. Nice to have skills Experience with DevSecOps practices and tools (e.g., SAST, DAST, IAST). Knowledge of security scanning tools and vulnerability management. Experience with secrets management solutions (e.g., HashiCorp Vault, AWS Secrets Manager, Azure Key Vault). Experience with automation frameworks for security testing. Knowledge of database technologies (SQL and NoSQL). Experience with serverless computing. Experience with Agile methodologies. Excellent communication and collaboration skills. Certifications related to cloud platforms or security (e.g., AWS Certified DevOps Engineer, Azure DevOps Engineer Expert, Google Cloud Certified Professional Cloud DevOps Engineer, Certified Kubernetes Administrator (CKA), Certified Information Systems Security Professional (CISSP)). Experience with performance testing and optimization. Experience with incident response and troubleshooting. Familiarity with compliance standards like SOC 2, ISO 27001