Devsecops Engineer

Role: Devsecops Engineer

Role type: Permanent

Location: Manila

PROFESSIONAL SUMMARY

A DevSecOps Engineer combines an understanding of both engineering and coding. This role will work with various departments to create, develop and automate various systems functioning for development, build, deployment, monitoring, alerting, infra as a Code (IaaS) within a company.

DevSecOps engineer provides a detailed SME expertise of automation management toolsets, such as CI/CD, Terraform, Ansible, IaaS, Puppet, Chef, Prometheus, Grafana, Building networking, security policies and infra on AWS and/or on prem. This role will review the architecture & design, Terraform codes, and Shell Scripting.

This role is going to report to the DevSecOps Technical Lead.

RESPONSIBILITIES

1.   Co-ordinate with the existing engineering team to understand their development, build and deployment process.

2.   Make design to build secure networking, infrastructure, database, monitoring, alerting on AWS cloud.

3.   Automate this build and deployment process with automated CI/CD pipelines using the technologies Git, Jenkins, AWS CI, ARGO CD, Nexus, SonarQube, Docker, Docker images, Kubernetes, and AWS EKS & ECS.

4.   Writing and managing the docker files, service files, deployment files (with various aspects to take care for auto scalability, de-scalability, certs, roles, volume integration) for the various microservices.

5.   Manage the artifacts for all the 3rd party dependent jars, and the image repository for all the 3rd party docker images which are used in various projects in the Nexus tool.

6.   Make sure to run the regular basis security scanning on all the 3rd party jars and docker images artifacts, and in case of any threat detected to automatically notify the respective for this threat. Continuously follow with that engineering team to provide alternate jar/war/images in lieu of the unsecured and corrupted one.

7.   Create an infrastructure-as-code mentality. Write Terraform scripts to code the entire infra, networking, configurations, security policies setup on AWS as an IaaS.

8.   Bring the expertise into architecture & design on AWS.

9.   Implements monitoring/alarming tools, develops/reviews KPIs, identifies issues, errors, inconsistencies, anomalies, to ensure system health and works with lead engineers to plan and scale services as necessary.

10. Supports and co-ordinates with other DevOps leads and engineers with the architecture, design, development.

11. Build the strategy & setup the process to implement the maker and checker concept for any changes going to happen in the security policies, network, infra etc.

TECHNICAL SKILLS

1.   Primarily AWS cloud. Good to have Azure knowledge as well.

2.   Certification on AWS cloud is preferred.

3.   Various tech stacks on AWS Like: VPC, AWS networking, EC2, WAF, CDN, Route 53, Security policies, AWS CI/CD, ECS, EKS, containerization, Application load balancer, KMS, Vault. Sound knowledge of architecture.

4.   Design and implement the automation for CI/CD using Jenkins and ARGO

5.   Design and implementation for monitoring, alerting, and observability of the entire infra, network, database, and any security breaches.

6.   Setup auto scalability and de-scalability of the microservices.

7.   Make sure the architecture and design are supporting the Disaster Recovery (DR) and High Availability (HA)

8.   Sound knowledge of monitoring and alerting tools like: Prometheus, Grafana, develop the various dashboards in Prometheus & Grafana, Prometheus query language.

9.   Expertise in writing the Terraform Scripts to convert every setup into Infrastructure as a Code.

10. Sound knowledge of capacity planning and costing on AWS and/or on-prem datacenter.

11. Sound knowledge of shell scripting

12. Well versed in managing the various keys, certificates and its automatic renewal and rotations.

13. Expert in setting up the various security tools like: AWS DDOS, WAF, Inspector, KMS, Vault.

14. Sound knowledge on Ansible, Puppet and Chef like tools.

15. Setup SonarQube and/Checkmarks into the CI/CD pipeline for SAST, DAST, and code coverage report.

QUALIFICATIONS

1.   BE/B. Tech and/or M. Tech in any discipline

2.   2-6 years of industry experience in DevSecOps.

3.   Strong problem-solving skills.

4.   Strong on Terraform

5.   Good collaboration skills.

6.   Good communication skills.