Devsecops Engineer

Job Title: DevSecOps Engineer (GCP Preferred)

Experience: 5 to 7yrs

DevSecOps Engineer

Responsibilities:

• Design, provision, and manage

  GCP managed instances

  and infrastructure components.
• Implement

  auto-scaling

  strategies based on CPU and memory usage thresholds.
• Configure and manage

  GCP API Gateway

  ,

  firewalls

  ,

  subnets

  ,

  load balancers

  , and

  SSL certificates

  for secure public-facing services.
• Deploy and manage

  Redis

  ,

  PostgreSQL

  ,

  Elasticsearch

  ,

  HashiCorp Vault

  , and

  HashiCorp Consul

  as

  three-node clusters on Docker Swarm

  .
• Configure

  HAProxy

  in a clustered setup for load balancing along with

  Cloud DNS

  or Docker-native DNS.
• Automate deployment of

  Java, Python, and Angular microservices

  using

  Jenkins pipelines

  and

  Docker Compose

  in a three-node

  Docker Swarm

  setup.
• Ensure high availability and fault tolerance of clusters to support zero-downtime operations.
• Design secure container communication using Docker service names and internal networking.
• Implement

  production-grade security policies

  , controls, and standards for cloud and containerized environments.
• Support and maintain

  CI/CD pipelines

  using tools such as

  GitLab

  ,

  Nexus

  ,

  SonarQube

  ,

  Jenkins

  , and

  Docker

  .
• Automate

  code quality checks

  and

  vulnerability scanning

  as part of the CI/CD lifecycle.
• Manage and administer

  Linux (CentOS, Ubuntu, Container-Optimized OS)

  and

  Windows

  operating systems.
• Monitor cloud and on-prem environments using tools such as

  Prometheus

  ,

  Grafana

  , and

  Stackdriver

  , and respond to security incidents or alerts.

Key Skills:

• Cloud Platform:

  Google Cloud Platform (GCP) Compute Engine, Networking, API Gateway, Load Balancing, DNS

• Container Orchestration:

  Docker Swarm clustering, service discovery

• Load Balancing & DNS:

  HAProxy, Cloud DNS / inbuilt DNS services

• Data & Secrets Management:

  Redis, PostgreSQL, Elasticsearch, HashiCorp Vault, HashiCorp Consul

• Microservices & Secure Networking:

  Microservices deployment, secure inter-container communication

• CI/CD & DevOps Tools:

  GitLab, Nexus, SonarQube, Jenkins, Docker

• Security:

  Cloud security standards, policies, secure deployment practices, vulnerability scanning

• Operating Systems:

  Linux (CentOS, Ubuntu, Container-Optimized), Windows Server

• Monitoring & Alerting:

  Prometheus, Grafana, Stackdriver