Responsibilities
- Design and implement DevSecOps practices and security controls across enterprise environments.
- Architect and maintain CI/CD pipelines for secure software delivery.
- Utilize cloud platforms such as AWS, Azure, or Google Cloud Platform to optimize infrastructure.
- Implement Infrastructure as Code tools like Terraform, Ansible, or CloudFormation for automation.
- Utilize security tools such as SonarQube, Checkmarx, Veracode, Snyk, Prisma Cloud, Aqua Security, or equivalent for vulnerability management.
- Work with Docker, Kubernetes, and container orchestration for secure deployment.
- Manage IAM, RBAC, secrets, encryption, certificates, and network security for a robust security posture.
- Ensure compliance with security frameworks and standards such as NIST, CIS Benchmarks, and OWASP.
- Automate tasks using scripting languages like Python, Bash, PowerShell, or similar tools.
- Provide troubleshooting support, analyze system performance, and communicate effectively with stakeholders.
Requirements
- Required Qualifications:
- 10+ years of experience in DevOps, cloud infrastructure, platform engineering, or related roles, with architecture-level experience.
- Strong hands-on experience implementing DevSecOps practices and security controls across enterprise environments.
- Expertise in CI/CD pipeline architecture, automation, and secure software delivery.
- Experience with cloud platforms such as AWS, Azure, or Google Cloud Platform.
- Strong knowledge of Infrastructure as Code tools such as Terraform, Ansible, or CloudFormation.
- Hands-on experience with security tools such as SonarQube, Checkmarx, Veracode, Snyk, Prisma Cloud, Aqua Security, or equivalent.
- Experience with Docker, Kubernetes, container orchestration, and container security.
- Strong understanding of IAM, RBAC, secrets management, encryption, certificates, and network security.
- Knowledge of security frameworks and compliance standards such as NIST, CIS Benchmarks, and OWASP.
- Experience with scripting and automation using Python, Bash, PowerShell, or similar languages.
- Strong troubleshooting, analytical, communication, and stakeholder management skills.
- Preferred Skills:
- Certifications in DevOps, cloud security, or related fields.
- Experience with additional cloud platforms or tools.
- Knowledge of additional security tools and practices.
- Experience working in a regulated industry.
IR35 Status:
Not specified