DEVSECOPS ENGINEER RESPONSIBILITY
• Develop automation and processes to enable teams to deploy, manage scale and monitor their applications in data centers and in cloud • System troubleshooting and problem solving across platform and application domains, expect to participate in on-call escalations to troubleshoot customer facing issues • Take ownership of end-to-end solutions provided by teams across the organisation • Deploy and manage monitoring tools of infrastructure performance, utilization and health • Implement configuration management system for business continuity management and automate disaster recovery measures • Provision virtual machines, databases, application containers and licenses for development team • Configure and maintain the CICD pipelines, incorporating streamlined changes and release management process • Develop scripts and sets up necessary automation tools used to build, integrate and deploy software releases to various platforms, including development and production environments • Automates the configuration management of development, quality assurance, and production workloads as well as the automation of CI of the codebase and the CD of releases • Designs, builds, optimises and monitors the automation systems solutions to identify system bottlenecks, production issues to maximise service availability • Builds automation framework for deployment, management, monitoring of applications, as well as maintains the configuration and deployment tools to auto-scale the application platform • Plans, implements, monitors and manages the overall system security architecture • Performs threat and risk assessments and applies secure configuration profiles to their systems • Performs security checks such as infra level VA and troubleshooting • Employs best practices when implementing security controls within an information system • Implement security practices that comply with standards to protect the organisation’s data and infrastructure EXPERIENCE AND SKILLS NEEDED • Minimum of 3 years’ experience with DevSecOps related scope of work • Passion for automation, standardization and best practices • Excellent understanding of Software Development Life Cycle, Test Driven Development, Continuous Integration and Continuous Delivery • Experience working with high availability, high performance, high security, multi-data center systems and hybrid cloud environments • Demonstrable skills in three or more programming/scripting languages such as Bash or Powershell • Experience with version control systems such as Git • Experience with such as GCC (i.e. AWS, Azure, Google Cloud) • Ability to troubleshoot complex issues ranging from system resource to application stack traces • Comfortable with Agile methodologies and working closely with product development teams
• Strong on collaboration and communication including documentation
Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines.
• Experience in one or more automated provisioning tools such as Vagrant, Ansible, Puppet, Terraform, or cloud automation tools
• Experience in one or more Cloud infrastructure such as OpenStack, CloudStack, vSphere
• Knowledge of RPM file deployment, management and design
• Knowledge of disaster recovery, system backup and restore
• Experience in one or more virtualization technologies (KVM, VMware, Hyper- V)
• Knowledge of container technologies such as Docker, Kubernetes
• Knowledge of Cloud Native Computing Foundation (CNCF) such as Prometheus, Helm, Argo, istio, Gatekeeper, Crossplane etc
• Experience with Application Development in an enterprise setting
• Experience with DevOps toolset like GitLab, JIRA, BitBucket, Confluence Added advantage if possess the following:
• Experience with these security tools in the enterprise setting: Hashicorp Vault, Elastics Search Enterprise, Tenable, HP Fortify, Sonatype Nexus IQ, AWS security cloud natives tools
• Experience with security assessments pertaining to government projects
• Security certifications or qualifications such as CREST
• Experience with continuous integration and continuous delivery /deployment methodology
• Worked for an organization which succeeded DevSecOps transformation • Good understanding of network infrastructure (e.g. subnet, firewalls, routers etc.) and Linux operating system
