Senior DevSecOps Engineer

About the Role

We are seeking a DevSecOps professional with a strong passion for security and a desire to work in a dynamic environment. In this role, you will be instrumental in integrating security practices into our development and operations processes, ensuring our applications are secure from the ground up.

Responsibilities

• Security Implementation: Identify and enforce security best practices, including threat modeling, vulnerability assessments, and compliance checks within our Azure AKS environment.
• Manage and Enhance CI/CD Pipelines: Oversee the build and release pipelines using Azure DevOps, ensuring security is embedded throughout the development lifecycle.
• Tool Utilization for Security Enhancements: Leverage security tools to assess and improve the security posture of Kubernetes deployments and overall Applicaiton architecture.
• Troubleshoot Technical Issues: Resolve technical problems related to deployments and security incidents promptly.
• Onboarding and Training: Support the onboarding of new employees by educating them on security protocols and best practices.
• Documentation Management: Create and maintain comprehensive process documentation that outlines security measures and procedures.
• Customer Support: Guide customers through security-related issues and ensure timely follow-up to confirm resolution.
• Feature Rollouts: Communicate new feature rollouts with an emphasis on security implications and enhancements.
• Multi-tasking: Manage multiple support tickets and prioritize tasks effectively to maintain operational continuity.
• Log Analysis: Trace logs and monitor infrastructure-related issues to identify security vulnerabilities.
• Stakeholder Collaboration: Delegate issues to appropriate stakeholders and follow up to ensure timely resolution.

Expected and Desired Skills

• Proficiency in Windows/Linux: Strong understanding of both operating systems to manage security configurations effectively.
• Debugging and Problem-Solving Skills: Ability to troubleshoot and resolve complex technical issues, especially those related to security.
• Cloud Experience: Familiarity with cloud platforms, particularly Azure (experience with AWS or others is a plus).
• Programming Knowledge: Basic understanding of a programming language to support development and security automation.
• Database Management: Understanding of SQL and basic database administration tasks with a focus on securing data.
• Interpersonal Skills: Strong communication and collaboration skills to work effectively with diverse teams.
• Containerization Knowledge: Basic knowledge of Docker and Kubernetes for secure application deployment.
• Security Tools Exposure: Familiarity with tools for policy enforcement and security automation in Kubernetes environments.
• Good Communication: Strong written and verbal communication skills to convey complex security concepts clearly.

Experience & Education

• Education: An undergraduate degree, or equivalent, in Software Engineering/Computer Science.
• Proactive Attitude: A go-getter attitude with a willingness to learn from various challenges.
• Availability: Open to working in a flexible environment to support critical operations and incident response.