DevSecOps Engineer

Responsibilities: • Build and maintain CI/CD pipelines that support Agile teams and ARTs. • Provision and manage environments (development, test, staging, production). • Use infrastructure as Code (IaC) tools (i.e., Terraform, Helmfile, Ansible, Kubernetes Manifests) to ensure re-producibility and compliance. • Ensure high availability and resilience in cloud and on-prem environments (e.g., zero-downtime deployment, blue/green and canary release strategies) • Manage the automation and toolchain integration for code quality, security scanning, release management and monitoring; automate repetitive tasks to improve flow efficiency across the value stream, ensure the toolchain aligns with the Lean-Agile principles. • Work closely with System Architects, Release Train Engineers (RTEs) and agile teams to align on delivery practices. • Provide DevOps coaching to teams so they adopt the right practices for version control, branching strategies, and automated testing. • Support Program Increment (PI) planning by ensuring environments and pipelines is ready. • Develop security practices (e.g., Secrets Management) into the software delivery CI pipelines to ensure the artefacts are of the premium quality level (shift-left security). • Automate compliance checks and enforce policies (e.g., code signing, container scanning). • Develop systems observability practices (e.g., monitoring, logs, traces) to define and track metrics like deployment frequency, lead time for changes, change failure rate, and MTTR. • Collaborate with InfoSec and Compliance teams to run regular security audits, risk assessments and data assessments. • Contribute to disaster recovery planning and testing. ·       Work in an agile, cross-functional multinational team, actively engaging to support the success of the team. Requirements: Education ·       Bachelors in Computer Science or Information Technology ·       Recognized Engineering degree Essential Skills/Experience • Strong expertise in Linux Operating System (i.e., Linux Process Sub-systems, Linux FileSystem) • Strong expertise in Linux shell scripting (i.e., bash scripting) • Strong expertise in designing and deploying Continuous Integration Pipelines for Software Development Teams • Strong expertise in Secrets Management and Configuration Management of subsystems in a Container Orchestration Framework, such as Kubernetes. • Strong expertise in designing, deploying & securing OCI containerized workloads (e.g., Docker, Kaniko) in Container Orchestration Frameworks (e.g., Kubernetes) running on-top of on-premises infrastructure and cloud infrastructure. • Strong expertise in designing and implementing pro-active monitoring of production grade environments, incident response and allows swift mitigation of security threats. • Expertise with observability tools like OpenTelemetry (OTEL) for monitoring and instrumentation, ensuring comprehensive visibility into system health and performance in Container Orchestration Frameworks. • Demonstrated experience in working in data center environments; bonus if you have relevant experience on working in mission critical systems. • Demonstrated ownership of the DevSecOps Mindset and demonstrated experiences of guiding the Software Development Teams in embracing the DevSecOps Mindset. • Demonstrated experience in working in a multi-cultural and multi-disciplinary environment. • Good communication skills in English. Desirable Skills/Experience If you have the following desirable skills and relevant experiences, it would be an added advantage! • Relevant certifications such as Certified Kubernetes Administrator (CKA) or Certified Kubernetes Security Specialist (CKSS). • Familiarity with popular DevOps tools (e.g., Jenkins, Git, Terraform) to enhance our Kubernetes development pipeline. • Experience with CI/CD tools and practices integrated with Kubernetes, driving continuous improvement and deployment. • Familiar with cloud-native deployment strategies to cloud service providers (e.g., Azure Cloud, Amazon Cloud, Google Cloud). • Familiar with the main cloud service models: Software as a Service, Platform as a Service and Infrastructure as a Service. Essential / Desirable Traits ·       Possess learning agility, flexibility and pro-activity ·       Comfortable with agile teamwork and user engagement