Senior Associate, DevSecOps Engineer

Business Function

Group Technology and Operations (T&O) enables and empowers the bank with an efficient, nimble, and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability, and innovation. In Group T&O, we manage the majority of the Banks operational processes and inspire to delight our business partners through our multiple banking delivery channels

Roles & Responsibilities

• Contribute in developing and implementing automated CI/CD capability for our application
• Knowledge of Unix/Linux system and containerization and container orchestration platforms and platforms (viz., Docker, Cloud Foundry, OpenShift, Kubernetes) etc
• Contribute in our continuous improvement and continuous delivery while increasing maturity of DevOps practices
• Get involved in the discussions and provide inputs in designing a fully automated, robust and secure infrastructure
• Responsible for handling Release Management, raising Change Request and scheduling for the implementation of fixes and enhancements.
• Support our production environment with strong performance tuning, end-to-end troubleshooting, networking fundamentals skills
• Ability to work in a dynamic environment with ability to self-organize and plan and prioritise the work in an environment where multiple issues compete for attention
• Collaborate closely with other internal SRE and Dev teams/business users in investigating, testing and deployments
• Work effectively in collaboration with different teams either local or remote
• Work towards high availability of our applications by putting in right Observability in place
• Hands on experience hybrid cloud(AWS/AZURE/PCF/GCP)
• Identify, assess, and remediate security vulnerabilities in cloud infrastructure and applications.
• Develop and enforce security policies, standards, and procedures in DevOps practices
• Automate security controls, governance processes, and monitoring across environments (eg, cloud, containers, on-premise).
• Manage and monitor security tools, including firewalls, intrusion detection/prevention systems, and other security monitoring solutions.
• Continuously improve and advocate for security awareness across development and operational teams.
• Application Deployment & Release Management:- Collaborate with developers to build and implement CI/CD pipelines for automated application deployments. Define and implement standardized processes for version control, build management, and deployment.
• Continuous Improvement:- Identify opportunities for process improvement and automation. Research and evaluate new technologies and tools for DevOps practices.
• Infrastructure & System Management:- Develop and manage automation scripts and tools for application deployment.

Requirements

• Minimum 6-9 years experience as a Site Reliability engineer supporting different application and application infrastructure in a Hybrid-cloud platforms with mix of On-Prem and AWS/PCF.
• Hands on experience any of the CI/CD tools viz., Jenkins, Circle-CI, GitHub Actions and ability to understand and define different deployment strategies
• Hands-on experience with GIT, managing deployment and branching with in GIT
• Strong scripting skills ability automate manual tasks which could be easily converted to a script - shell, Python or PowerShell
• Familiarity with usage of Observability tools like Grafana, Kibana, AppDynamics etc
• Ability to support Java (J2EE/Spring Boot) or .NET applications and manage Incident and support recovery of the application and drive root cause analysis, management communication and client relationship management in partnership with Infrastructure Service Support team members
• Application Support, Deployment of Release, patches & fixes on Platform
• Analyse application performance, perform tuning and ensure high availability & stability of platform
• Experience with supporting Java (J2EE/Spring Boot) based multi-tier applications with complex upstream downstream interactions having expertise in understanding the application request flow and analysing application logs for investigating and troubleshooting issues and application break
• Ensures all production changes are made in accordance with life-cycle methodology and risk guidelines
• Knowledge of Batch Processing systems and tools
• Solid understanding of security tools for static/dynamic code analysis, vulnerability scanning, and monitoring.
• Knowledge of security frameworks
• Prior experience in a regulated environment with strict security compliance needs
• Excellent problem-solving and communication skills, with the ability to work in a fast-paced environment.