DevSecOps Engineer

• This role is hands-on and operational - focused on running, securing, and stabilizing production systems.
• Manage and optimize application deployments across AWS EKS, ECS, and EC2 environments.
• Oversee production operations, incident management, and root cause analysis (RCA) for critical issues.
• Implement and maintain CI/CD pipelines using Jenkins, GitLab CI, GitHub Actions, or AWS CodePipeline.
• Ensure secure deployment processes through integrated scanning tools (Snyk, Trivy, SonarQube, rapid7) and vulnerability management.
• Implement & Monitor system health using CloudWatch, Prometheus, Grafana, and ELK, ensuring proactive alerts and observability.
• Administer and manage AWS services including S3, EC2, ECR, ECS, EKS, Lambda (serverless), SNS, SES, and Secrets Manager.
• Configure and secure networking components - VPC, subnets, route tables, NAT gateways, security groups, load balancers (ALB/NLB), CloudFront, API Gateway, and WAF.
• Enforce AWS IAM and network security best practices, including least-privilege policies and secure key management.
• Collaborate with development and QA teams to optimize application performance, reliability, and security posture.
• Drive and promote a Security by Design mindset and SRE-driven reliability culture within the DevOps ecosystem.

• Proven hands-on experience managing AWS production environments - EKS, ECS, EC2, S3, CloudFront, API Gateway, WAF, SNS, SES, Secrets Manager, CloudWatch, VPC, IAM.
• Strong understanding of containerization (Docker) and container orchestration (Kubernetes / ECS).
• Proficiency with CI/CD tools - Jenkins, GitLab CI, GitHub Actions, AWS CodePipeline.
• Strong networking knowledge - VPC design, subnets, DNS, routing, SSL/TLS, load balancing, and firewall rules.
• Experience implementing DevSecOps practices - scanning, policy enforcement, and compliance monitoring.
• Skilled in troubleshooting across infrastructure, networking, and application layers.
• Experience with monitoring and alerting stacks - Prometheus, Grafana, ELK, CloudWatch.
• Scripting experience using Bash, Python, YAML, and JSON.

• Certifications such as AWS Certified DevOps Engineer, CKA / CKAD, or AWS SysOps Administrator.
• Familiarity with service mesh (Istio / App Mesh) and policy-as-code tools (OPA, Kyverno).
• Experience with runtime security platforms (Falco, Aqua, Prisma Cloud).
• Terraforms, CloudFormation for deployment automation.
• Knowledge of Zero Trust architecture and AWS Security Hub / GuardDuty.
• Exposure to incident response automation or resilience engineering practices.

Required Skills