Technical Lead - DevSecOps

Senior DevOps Engineer will be responsible for implementing and managing secure DevOps practices, focusing on automating processes, securing infrastructure, and optimizing workflows within a dynamic and evolving environment. They will will work closely with cross-functional teams, ensuring the integration of security into every aspect of the DevOps lifecycle to build resilient, secure, and scalable systems.

Educational Qualification:

Bachelor's degree in computer science, Cyber, Information Security, or a related field (or equivalent experience).

Certification:

AWS Certified DevOps Engineer, Azure DevOps Engineer Expert, or other relevant certifications.

Work Experience (Range of years):

10+ years of experience in DevOps, with at least 5 years in leading DevOps role.

Automation and CI/CD Optimization:

Design, create and optimize CI/CD pipelines in GitLab, contribute to the templatization framework and make sure most pipeline code is reusable across various microservices, implementing best practices for efficiency and reliability.

Infrastructure as Code (IaC):

Create Terraform Modules that are reusable in various implementation Infrastructure as Code (IAC). Modules have to follow best practices and security guidelines concurred internally. Use Ansible for configuration management and automation of server setups (TSDB, PGPool, Looker VM etc.), ensuring consistency across environments.

Containerization and Orchestration:

Implement secure containerization using tools like Docker and Kubernetes, ensuring security best practices (e.g., secure image scanning, role-based access control).

Automate deployment processes for containerized applications in a secure and efficient manner. Manage complex Kubernetes clusters, including advanced networking, security, and resource management. Create and maintain Helm charts for complex Kubernetes orchestration

Cloud Security:

Work with cloud providers (AWS, Azure, GCP) to design secure cloud infrastructure, ensuring compliance with security frameworks and best practices.

Implement security controls such as encryption, IAM, and network security in cloud environments.

Incident Response and Threat Detection:

Investigate and mitigate security incidents and vulnerabilities in a timely and efficient manner.

Collaborate with security teams to identify, analyze, and patch security vulnerabilities within the CI/CD pipeline and infrastructure.

Collaboration with Development and Security Teams:

Work closely with developers to ensure security is integrated from the beginning of the development lifecycle.

Collaborate with cybersecurity professionals to ensure the infrastructure and applications meet compliance standards.

Documentation and Reporting:

Document the DevOps processes, security procedures, and compliance reports.

Ensure accurate and timely reporting of security status and activities to stakeholders and management.