DevOps Engineer

About the Role: We are seeking a skilled DevOps Engineer with a strong emphasis on security to join our team. The ideal candidate will play a critical role in designing, implementing, and maintaining secure infrastructure and deployment pipelines. This position requires expertise in DevOps practices, cloud security, automation, and a proactive approach to identifying and mitigating security risks across our systems and applications.

Key Responsibilities:

• Design, implement, and maintain secure cloud infrastructure on platforms such as AWS, Azure, or Google Cloud, ensuring adherence to security best practices and compliance requirements.
• Implement and manage CI/CD pipelines for automated build, test, and deployment processes, integrating security checks and controls at each stage of the pipeline.
• Collaborate with development and operations teams to implement security controls, configure access permissions, and monitor system activity to detect and respond to security incidents.
• Conduct security assessments and vulnerability scans of infrastructure components, applications, and third-party integrations, and work with teams to remediate identified vulnerabilities.
• Implement and manage identity and access management (IAM) policies, encryption mechanisms, and network security controls to protect data and resources.
• Configure and manage security tools and technologies such as intrusion detection/prevention systems (IDS/IPS), security information and event management (SIEM), and endpoint protection.
• Automate security tasks and processes using scripting languages (Python, Bash, etc.) and infrastructure-as-code tools (Terraform, Ansible, etc.) to ensure consistent and scalable security practices.

Requirements:

• Bachlor's degree in Computer Science, Information Security, or a related field
• 4+ years of experience in DevOps or system engineering roles, with a focus on security
• Strong understanding of cloud computing principles and experience with cloud platforms (AWS, Azure, Google Cloud, etc.), including security services and controls
• Knowledge of secruity concepts and technologies such as encryption, authentication, authorization, network security, and secure coding practices
• Experience with security assessment tools, vulnerability scanning tools, and penetration testing methodologies
• English fluency required