Job Description
We are seeking an experienced DevOps Engineer with strong DevSecOps experience to design, implement, automate, and maintain secure, scalable, and reliable cloud infrastructure and CI/CD pipelines.
The successful candidate will work closely with development, infrastructure, operations, data, and security teams to automate software delivery, improve infrastructure reliability, and integrate security practices throughout the software development lifecycle.
The role involves supporting cloud-based data platforms, implementing Infrastructure-as-Code, managing CI/CD pipelines, deploying containerized workloads, and ensuring appropriate security, compliance, and governance controls are embedded within the DevOps environment.
Key Responsibilities
- Design, develop, maintain, and optimize CI/CD pipelines using GitLab CI/CD and related DevOps tools.
- Automate application build, testing, deployment, and release processes.
- Implement and manage Infrastructure-as-Code (IaC) using Terraform.
- Deploy, configure, and maintain cloud infrastructure and containerized workloads on AWS.
- Manage and optimize cloud infrastructure for reliability, scalability, performance, and availability.
- Integrate DevSecOps practices into CI/CD pipelines, including automated security, vulnerability, dependency, and code-quality checks.
- Configure and maintain security and code-quality tools such as SonarQube, Fortify, and Nexus IQ.
- Perform vulnerability scanning, security assessment, system hardening, remediation, and patching activities.
- Implement appropriate access controls, secrets management, encryption, and key-management practices.
- Monitor infrastructure, applications, deployment pipelines, and security events to identify and resolve issues.
- Support security incident investigation, vulnerability management, and remediation activities.
- Coordinate security assessments, penetration testing, compliance scanning, and remediation of identified findings.
- Develop and maintain scripts and automation using Python, Bash, PowerShell, or similar technologies.
- Deploy and manage containerized applications using Docker and Kubernetes.
- Troubleshoot infrastructure, deployment, application, cloud, and security-related issues.
- Collaborate with development, data, infrastructure, security, and operations teams to deliver reliable and secure solutions.
- Maintain technical documentation, deployment procedures, configuration standards, and operational runbooks.
- Participate in Agile practices, continuous improvement, and automation initiatives.
Required Qualifications & Experience
- Degree or Diploma in Computer Science, Information Technology, Engineering, or a related discipline.
- Minimum 3 years of relevant experience in DevOps, Cloud Engineering, Infrastructure Engineering, or related roles.
- Strong hands-on experience in DevOps engineering, including CI/CD, infrastructure automation, cloud deployment, and operational support.
- Hands-on experience with AWS cloud services and cloud infrastructure.
- Strong experience with GitLab CI/CD and automated deployment pipelines.
- Hands-on experience with Terraform or other Infrastructure-as-Code technologies.
- Experience with DevSecOps practices, including integrating security controls and automated security testing into CI/CD pipelines.
- Experience with tools such as SonarQube, Fortify, Nexus IQ, or equivalent security and code-quality platforms.
- Experience with vulnerability assessment, security scanning, system hardening, and remediation.
- Experience with Docker and Kubernetes or similar containerization and orchestration technologies.
- Strong scripting and automation skills using Python, Bash, PowerShell, or similar languages.
- Understanding of cloud security, IAM/access controls, encryption, secrets management, and key management.
- Experience with infrastructure and application monitoring, troubleshooting, and incident management.
- Good understanding of DevOps and DevSecOps principles and secure software development practices.
- Experience working in Agile development environments.
Preferred Skills
- Experience with AWS Government Commercial Cloud (GCC) or similar regulated cloud environments.
- Familiarity with security and compliance frameworks such as NIST, ISO 27001, or CIS Benchmarks.
- Experience with security assessments, compliance scanning, security acceptance testing, and remediation.
- Familiarity with tools and platforms such as SHIP-HATS, CloudSCAPE, ABLR, GCSOC, CAM, VMS, or SSAT.
- AWS, DevOps, or relevant cloud/security certifications.
Personal Attributes
- Strong analytical and problem-solving skills.
- Good communication and collaboration abilities.
- Strong attention to detail and commitment to security best practices.
- Proactive approach to automation, monitoring, troubleshooting, and continuous improvement.