DevSecOps Engineer

Key Responsibilities • Design, implement, and manage secure and scalable infrastructure on both cloud platforms (AWS/Azure) and on-premise virtualization environments (Hyper-V, ESXi, Proxmox VE, etc.). • Experience on implementation with Infrastructure as Code (IaC) tools, especially Terraform • Set up and maintain middleware such as NGINX and ATS. • Implement observability (o11y) stacks such as Grafana Stack. • Deploy and manage Kubernetes clusters including k3s, k0s, and managed services like AWS EKS. • Provision and manage databases including AWS RDS, PostgreSQL, MySQL, Oracle, and Microsoft SQL Server. • Administer and secure on-premise server infrastructure, including hypervisor management, patching, and performance tuning. • Collaborate with development and operations teams to troubleshoot and resolve infrastructure and security-related issues. • Monitor systems for security threats, respond to incidents, and conduct post-mortem analysis. • Manage and enforce access control policies across various systems and platforms. • Champion and integrate security best practices ("shifting left") into the software development lifecycle, from code to deployment. • Develop, maintain, and optimize our CI/CD pipelines, with a primary focus on GitLab CI, to ensure rapid, reliable, and secure software delivery. • Automate security testing, vulnerability scanning, and compliance checks within the deployment process. • Stay current with emerging security threats, technologies, and industry best practices. Technical Expertise & Experience • Proven experience as a DevOps, Site Reliability, or Systems Engineer with a strong focus on security. • Hands-on experience managing cloud environments in either AWS or Azure (e.g., IAM, VPC, Security Groups, EC2, S3, Azure AD, NSGs). • Solid experience in on-premise server administration and virtualization using platforms like Hyper-V, VMware ESXi, or Proxmox VE. • Demonstrable experience with CI/CD concepts and tools, particularly GitLab CI. • Familiarity with security tools for static/dynamic analysis (SAST/DAST), container scanning, and dependency checking. • Strong understanding of networking principles, firewalls, and secure network design. Technical Core • A background in software development, particularly with Java, is a significant plus. • Knowledge of containerization and orchestration technologies (Docker, Kubernetes). • Experience with scripting languages (e.g., Python, Bash, PowerShell) for automation. • Cloud certifications (e.g., AWS Certified Solutions Architect, Azure Administrator Associate).