DevSecOps Engineer

Key Responsibilities

• Design, implement, and manage secure and scalable infrastructure on both cloud platforms (AWS/Azure) and on-premise virtualization environments (Hyper-V, ESXi, Proxmox VE, etc.).
• Experience on implementation with Infrastructure as Code (IaC) tools, especially Terraform
• Set up and maintain middleware such as NGINX and ATS.
• Implement observability (o11y) stacks such as Grafana Stack.
• Deploy and manage Kubernetes clusters including k3s, k0s, and managed services like AWS EKS.
• Provision and manage databases including AWS RDS, PostgreSQL, MySQL, Oracle, and Microsoft SQL Server.
• Administer and secure on-premise server infrastructure, including hypervisor management, patching, and performance tuning.
• Collaborate with development and operations teams to troubleshoot and resolve infrastructure and security-related issues.
• Monitor systems for security threats, respond to incidents, and conduct post-mortem analysis.
• Manage and enforce access control policies across various systems and platforms.
• Champion and integrate security best practices ("shifting left") into the software development lifecycle, from code to deployment.
• Develop, maintain, and optimize our CI/CD pipelines, with a primary focus on GitLab CI, to ensure rapid, reliable, and secure software delivery.
• Automate security testing, vulnerability scanning, and compliance checks within the deployment process.
• Stay current with emerging security threats, technologies, and industry best practices.

Technical Expertise & Experience

• Proven experience as a DevOps, Site Reliability, or Systems Engineer with a strong focus on security.
• Hands-on experience managing cloud environments in either AWS or Azure (e.g., IAM, VPC, Security Groups, EC2, S3, Azure AD, NSGs).
• Solid experience in on-premise server administration and virtualization using platforms like Hyper-V, VMware ESXi, or Proxmox VE.
• Demonstrable experience with CI/CD concepts and tools, particularly GitLab CI.
• Familiarity with security tools for static/dynamic analysis (SAST/DAST), container scanning, and dependency checking.
• Strong understanding of networking principles, firewalls, and secure network design.

Technical Core

• A background in software development, particularly with Java, is a significant plus.
• Knowledge of containerization and orchestration technologies (Docker, Kubernetes).
• Experience with scripting languages (e.g., Python, Bash, PowerShell) for automation.
• Cloud certifications (e.g., AWS Certified Solutions Architect, Azure Administrator Associate).