DevSecOps Engineer

JOB PURPOSE:

• Reporting to the

  Director, DevSecOps & SRE

  , the DevSecOps Engineer will be responsible for: Design, implement and monitor enterprise-grade secure fault-tolerant infrastructure.
• Define and evolve Build & Release best practice by working within teams and educating the other stakeholder teams.

In the role as a DevSecOps Engineer, we believe that you are bringing experience of Operations and Security using DevOps. Strong analytical and automation skills that enable you to deliver the expected benefits to the business and digital products. Building and deploying distributed applications and big data pipelines in the cloud brings you excitement. You will be working with GCP and AWS. Jenkins, Groovy scripting, Shell scripting, Terraform, Ansible or an equivalent are a wide array of tools that you have used in the past.

influence and build the DevSecOps framework for leading Manufacturing platforms in Autonomous Buildings space, while working with the latest technologies on a cloud-based environment in a multi-disciplinary team with platform architects, tech leads, data scientists, data engineers, and insight specialists

JOB RESPONSIBILITIES:

• Design, implement and monitor enterprise-grade secure fault-tolerant infrastructure
• Define and evolve Build & Release best practice by working within teams and educating the other stakeholder teams. These best practices should support traceability & auditability of change.
• Ensure continuous availability of various DevOps tools supporting SCM & Release Management including Source Control, Containerization, Continuous Integration, & Change Management. (Jenkins, Docker, JIRA, SonarQube, Terraform, Google/Azure/AWS Cloud CLI).
• Implementing Build and release automated pipelines framework
• Implementing DevSecOps Tools and Quality Gates with SLO
• Implementing SAST, DAST, IAST, OSS tools in CICD Pipelines
• Implementing Automated change management policies in the pipeline from Dev-Prod.
• Work with cross-functional co-located teams in design, development and implementation of enterprise scalable features related to enabling higher developer productivity, environment monitoring and self-healing, and facilitating autonomous delivery teams.
• Build infrastructure automation tools and frameworks leveraging Docker, Kubernetes operate as a technical expert on DevOps infrastructure projects pertaining to Containerization, systems management, design and architecture.
• Perform performance analysis and optimization, monitoring and problem resolution, upgrade planning and execution, and process creation and documentation.
• Integrate newly developed and existing applications into private, public and hybrid cloud environments
• Automate deployment pipelines in a scalable, secure and reliable manner
• Leverage application monitoring tools to troubleshoot and diagnose environment issues
• Have a culture of automation where any repetitive work is automated
• Define and evolve Build & Release best practice by working within teams and educating the other stakeholder teams. These best practices should support traceability & auditability of change.
• Working closely with Cloud Infrastructure and Security teams to ensure organizational best practices are followed
• Translating non-functional requirements of Development, Security, and Operations architectures into a design that can be implemented using the chosen set of software for the project.
• Ownership of technical design and implementation for one or more software stacks of the DevSecOps team.
• Design and implementation of the distributed code repository.
• Implementing automation pipelines to support code compilation, testing, and deployment into the software components of the entire solution.
• Integrating the monitoring of all software components in the entire solution, and data mining the data streams for actionable events to remediate issues.
• Implement configuration management pipelines to standardize environments.
• Integrate DevSecOps software with credentials management tools.
• Create non-functional test scenarios for verifying the DevSecOps software setup.

KEY QUALIFICATION & EXPERIENCES:

• At least 5 years of relevant working experience in DevSecOps, Task Automation, or GitOps.
• Demonstrated proficiency in installation, configuration, or implementation in one or more of the following software.
• Jenkins, Azure DevOps, Bamboo, or software of similar capability.
• GitHub, GitLab, or software of similar capability.
• Jira, Asana, Trello, or software of similar capability.
• Ansible, Terraform, Chef Automate, or software of similar capability.
• Flux CD, or software of similar capability.
• Any test automation software.
• Any service virtualization software.
• Operating Software administration experience for Ubuntu, Debian, Alpine, RHEL.
• Technical documentation writing experience.
• DevOps Engineering certification for on-premises or public cloud is advantageous.
• Experience with work planning and effort estimation is an advantage.
• Strong problem-solving and analytical skills.
• Strong interpersonal and written and verbal communication skills.
• Highly adaptable to changing circumstances. Interest in continuously learning new skills and technologies.
• Experience with programming and scripting languages (e.g. Java, C#, C++, Python, Bash, PowerShell).
• Experience with incident and response management.
• Experience with Agile and DevOps development methodologies.
• Experience with container technologies and supporting tools (e.g. Docker Swarm, Podman, Kubernetes, Mesos).
• Experience with working in cloud ecosystems (Microsoft Azure, AWS, Google Cloud Platform).
• Experience with configuration management systems (e.g. Puppet, Ansible, Chef, Salt, Terraform).
• Experience working with continuous integration/continuous deployment tools (e.g. Git, TeamCity, Jenkins, Artifactory).
• Experience in GitOps-based automation is a plus.
• Experience with GitHub for Actions, GitHub for Security, GitHub Copilot.
• BE/B-Tech/MCA or any equivalent degree in Computer Science OR related practical experience.

• Must have 5+ years working experience in Jenkins, GCP (or AWS/Azure), Unix & Linux OS.

• Must have experience with automation/configuration management tools (Jenkins using Groovy scripting, Terraform, Ansible, or an equivalent).

• Must have experience in Kubernetes (GKE, Kubectl, Helm) and containers (Docker).

• Must have experience on JFrog Artifactory and SonarQube.

• Extensive knowledge of institutionalizing Agile and DevOps tools not limited to but including Jenkins, Subversion, Hudson, etc.
• Experience in Networking Skills (TCP/IP, SSL, SMTP, HTTP, FTP, DNS, and more).
• Hands-on in source code management tools like Git, Bitbucket, SVN, etc.
• Should have working experience with monitoring tools like Grafana, Prometheus, Elasticsearch, Splunk, or any other monitoring tools/processes.
• Experience in Enterprise High Availability Platforms and Network and Security on GCP.
• Knowledge and experience in the Java programming language.
• Experience working on large-scale distributed systems with a deep understanding of design impacts on performance, reliability, operations, and security is a big plus.
• Understanding of self-healing/immutable microservice-based architectures, cloud platforms, clustering models, networking technologies.
• Great interpersonal and communication skills.
• Self-starter and able to work well in a fast-paced, dynamic environment with minimal supervision.
• Must have Public Cloud provider certifications (Azure, GCP, or AWS).
• Having CNCF certification is a plus