DevSecOps

Key Responsibilities

• Design, build, and maintain CI/CD pipelines to automate code build, testing, and deployment processes.
• Develop and implement Infrastructure as Code (IaC) using tools such as Terraform, Ansible, or similar technologies.
• Deploy, monitor, and maintain applications across cloud and on-premises environments.
• Perform application patching, manage application versioning, and ensure production environment stability.
• Configure, maintain, and optimize monitoring and observability tools, including Zabbix and Datadog.
• Enhance application logging and system monitoring to improve reliability and incident response.
• Collaborate closely with Software Engineers, QA Engineers, and Infrastructure teams to support deployment activities and resolve infrastructure-related issues.
• Identify performance bottlenecks and optimize infrastructure for scalability, availability, and cost efficiency.
• Manage database high availability (HA) and replication to ensure business continuity.
• Implement and maintain security best practices across infrastructure and CI/CD pipelines.
• Enforce compliance with industry standards such as SOC 2, ISO 27001, and PCI-DSS.
• Integrate and automate security tools, including SAST, DAST, Software Composition Analysis (SCA), container security scanning, and Infrastructure as Code (IaC) scanning.
• Monitor systems for security threats, vulnerabilities, and policy compliance while supporting continuous security improvement.

Requirements

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 3 years of relevant experience for junior roles, 1 year of relevant experience for senior roles
• Hands-on experience building and maintaining CI/CD pipelines.
• Strong experience with Terraform, Ansible, or other Infrastructure as Code tools.
• Experience managing cloud and/or on-premises infrastructure.
• Experience with monitoring and observability platforms such as Zabbix and Datadog.
• Solid understanding of containerization and deployment best practices.
• Experience managing database high availability and replication.
• Strong understanding of DevSecOps principles and secure software delivery.
• Familiarity with security standards such as SOC 2, ISO 27001, and PCI-DSS.
• Experience with security testing tools including SAST, DAST, SCA, container security scanning, and IaC scanning.
• Strong knowledge of OWASP Top 10 and cloud security best practices.
• Experience working in Agile/Scrum environments is preferred.
• Strong analytical, troubleshooting, communication, and collaboration skills.