Senior Cloud DevOps Engineer - Software Development Security Quality

The Product Line

The DevSecOps Enablement Product Line has been established to support the software development lifecycle across Roche with an experienced team and a tools library that allow Roche Product Teams to leverage industry best practices and Roches enterprise platforms for their DevSecOps needs.

The Product

For this position which is designed to join the Software Development Security Quality & Compliance Product Team, your focus will be on security, quality and compliance, but we expect the versatility of the common skill set of Cloud DevOps Engineers as well.

Who you are:

• Be a hands-on technical leader on the DevSecOps Enablement tools, provide technical leadership through coaching and mentoring of other team members; support Product and Application teams in deploying and using DevSecOps Enablement tooling, including but not limited to:?Quality and Security: SonarQube,Mend,Sysdig, Snyk,Veracode, IriusRisk, Defect Dojo, Dependency Trek
• DevOps: Docker, Docker Hub, Jenkins, KlockWork, Artifactory, Hashicorp stack
• Lead training and demo sessions with Lifecycle or Application Teams and stakeholder groups.Lead agile tool usage, best practices, process adherence, and, where possible, set up automated dashboards and reports for team operations that use the DevSecOps Enablement tooling.Work closely with architects, product owners, and development teams to build automation, integrations, and to drive continuous improvement for systems and tools and introduction of new tools.
• Maintain dependencies and roadmap(s), and provide regular Product Team updates.Maintain DevSecOps Enablement workbooks and process documentation.

Collaboration

• Demonstrate excellent communication skills ; Collaborate with external offshore vendors team to increase the value delivery.
• Collaborate with vendors like Mend, SonarQube, GitHub, or GitLab to renew or procure the licenses, support etc; Collaborate with PSPO teams and Security Domain.

Driving alignment with DevSecOps Enablement strategy

• Understand and document the DevSecOps Enablement leaderships vision and requirements.
• Build relationships with the appropriate customer Product Teams and stakeholders to understand their needs and requirements.
• Identify the gaps in toolset needs from the customer Product Team to what DevSecOps Enablement offers.
• Define a vision for the DevSecOps Enablement operating model and toolset service model.
• Build a development, process, and strategy backlog (e.g., a formal backlog in JIRA) to achieve the DevSecOps Enablement vision.
• Share and obtain approval for Service Model recommendations.
• Support delivery of the agreed-upon vision.

You will work in an agile, capacity-based model to continually prioritize project needs using traditional agile sprint reviews with Roches DevSecOps Enablement leadership, to review progress and align on upcoming priorities.