DevSecOps Engineer at GVA Partners

Description

• The term "DevSecOps" is a collaborative working method that links the security and operations teams. The main objective of this collaboration is to limit risks insofar as security is "integrated" into all stages of DevOps projects.
• In addition, the term refers to the implementation of security as a fundamental part of all aspects of an organization and makes it the responsibility of all teams.
• Security and operations teams are therefore unified to maximize security while limiting the impact on efficiency

Responsibilities

• Provide hands-on rechnical expertise and support in general DevOps tasks.
• Responsible for defining and implementing the tild, deployment and monitoring standards for this customer;
• A part of Agile development teams to deliver an end-to-end automation of deployment, monitoring, and infrastructure management in a cloud environment;
• Build and configure delivery environments supporting CD/CI tools using an Agile delivery methodology;
• Create scripts and/or templates to automate and/or bootstrap infrastructure provisioning and management tasks;
• Working closely with our development team to create an automated continuous integration (CI) and continuous delivery (CD) system;
• Work together with vendors and other IT personnel for problem resolution;
• Monitor and support all installed systems and infrastructure;
• Develop custom scripts to increase system efficiency and lower the human intervention fime on any tasks;
• Contribute to the design of information and operational support systems;
• Organize the highest levels of systems and infrastructure availability, acting proactively;
• Install, configure, test and maintain operating systems, application software and system management tools;
• Oversee the company's security, backup, and redundancy strategies;
• Evaluate application performance, identify potential bottlenecks, develop solutions, and implement them with the help of developers
• Mentor junior infra engineers, evangelize good security habits and secure development practices;

Requirements

• BS or MS Degree in Computer Science, Engineering or another related area;
• Must be able to work in a specific environment: Jenkins, Docker, Java, Python, Ruby, Perl, Scripting YAML, SAST (Staric Application Security Testing), DAST (Dynamic Application Security Testing)
• Ability to work in an open ream environment;
• Experience deploying and monitoring web appliations in AWS;
• Security first mindset;
• Demonstrated experience with secure development, coding, engineering practices;
• Experience with Infrastructure as Code and infrastructure resting strategies;
• Experience with systems reliability, load balancing, monitoring, logging;
• Experience with fully automating CI/CD pipelines end-to-end, from code commits to production;
• Have effective verbal and non-verbal communication with peers and clients;
• Develop, document, and implement CI/CD strategy for management of Infrastructure as Code laC baseline;
• Solid experience in installing, configuring and troubleshooting UNIX/Linux based environments;
• Excellent knowledge of networking technologies, particularly with OSI network layers and TCP/IP;
• Strong scripting skills, including shell scripts, Perl, Ruby, Python, Go, Groovy, Helm, etc;
• Good experience in administering and performance tuning of application stacks, such as Tomcat, JBoss, Apache, Ruby, NGINX, and others.