Devops Engineer

A DevSecOps Staff Engineer integrates security into DevOps practices, designing secure CI/CD

pipelines, building and automating secure cloud infrastructure and ensuring compliance across

development, operations, and security teams.

Responsibilities

• Design, build and maintain secure CI/CD pipelines utilizing DevSecOps principles and

practices to increase automation and reduce human involvement in the process

• Integrate tools of SAST, DAST, SCA, etc. within pipelines to enable automated application

building, testing, securing and deployment.

• Implement security controls for cloud platforms (AWS, GCP), including IAM, container

security (EKS/ECS), and data encryption for services like S3 or BigQuery, etc.

• Automate vulnerability scanning, monitoring, and compliance processes by collaborating

with DevOps and Development teams to minimize risks in deployment pipelines.

• Suggesting architecture improvements, recommending process improvements.

• Review cloud deployment architectures and implement required security controls.

• Mentor other engineers on security practices and processes.

Requirements

• Bachelor's degree, preferably in CS or a related field, or equivalent experience

• 10+ years of overall industry experience with AWS Certified - Security Specialist.• Must have implementation experience using security tools and processes related to SAST,

DAST and Pen Testing

• AWS-specific: 5+ years’ experience with using a broad range of AWS technologies (e.g.

EC2, RDS, ELB, S3, VPC, CloudWatch) to develop and maintain an Amazon AWS based

cloud solution, with an emphasis on best practice cloud security.

• Experienced with CI/CD tool chain (GitHub Actions, Packages, Jenkins, etc.)

• Passionate about solving security challenges and being informed of available and

emerging security threats and various security technologies.

• Must be familiar with the OWASP Top 10 Security Risks and Controls

• Good skills in at least one or more scripting languages: Python, Bash

• Good knowledge in Kubernetes, Docker Swarm or other cluster management software.

• Willing to work in shifts as required

Good to Have

• AWS Certified DevOps Engineer

• Observability: Experience with system monitoring tools (e.g. CloudWatch, New Relic,

etc.).

• Experience with Terraform/Ansible/Chef/Puppet

• Operating Systems: Windows and Linux system administration.

Perks:

● Day off on the 3rd Friday of every month (one long weekend each month)

● Monthly Wellness Reimbursement Program to promote health well-being

● Monthly Office Commutation Reimbursement Program

● Paid paternity and maternity leaves

Required Skills:

• Experience in systems administration, SRE or DevOps focused role
• Experience in handling production support (on-call)
• Good understanding of the Linux operating system and networking concepts.
• Demonstrated competency with the following AWS services: ECS, EC2, EBS, EKS, S3, RDS, ELB, IAM, Lambda.
• Experience with Docker containers and containerization concepts
• Experience with managing and scaling Kubernetes clusters in a production environment
• Experience building scalable infrastructure in AWS with Terraform.
• Strong knowledge of Protocol-level such as HTTP/HTTPS, SMTP, DNS, and LDAP
• Experience monitoring production systems
• Expertise in leveraging Automation / DevOps principles, experience with operational tools, and able to apply best practices for infrastructure and software deployment (Ansible).
• HAProxy, Nginx, SSH, MySQL configuration and operation experience
• Ability to work seamlessly with software developers, QA, project managers, and business development
• Ability to produce and maintain written documentation

DESIRED SKILLS AND EXPERIENCE

 Strong analytical and problem-solving skills

 Ability to work independently, learn quickly and be proactive

 3-5 years overall and at least 1-2 years of hands-on experience in designing and managing DevOps Cloud infrastructure

 Experience must include a combination of:

o Experience working with configuration management tools – Ansible, Chef, Puppet, SaltStack (expertise in at least one tool is a must)

o Ability to write and maintain code in at least one scripting language (Python preferred)

o Practical knowledge of shell scripting

o Cloud knowledge – AWS, VMware vSphere o Good understanding and familiarity with Linux

o Networking knowledge – Firewalls, VPNs, Load Balancers

o Web/Application servers, Nginx, JVM environments

o Virtualization and containers - Xen, KVM, Qemu, Docker, Kubernetes, etc.

o Familiarity with logging systems - Logstash, Elasticsearch, Kibana

o Git, Jenkins, Jira

• Candidate should be able to write the sample programs using the Tools (Bash, PowerShell, Python or Shell scripting)
• Analytical/logical reasoning
• GitHub Actions
• Should have good working experience with GitHub Actions
• Repository/Workflow Dispatch, writing reusable workflows, etc
• AZ CLI commands
• Hands-on experience with AZ CLI commands

• 5+ years of experience in DevOps including automated system configuration, application deployment, and infrastructure-as-code. 
• Advanced Linux system administration abilities. 
• Real-world experience managing large-scale AWS or GCP environments. Multi-account management a plus. 
• Experience with managing production environments on AWS or GCP. 
• Solid understanding CI/CD pipelines using GitHub, CircleCI/Jenkins, JFrog Artifactory/Nexus. 
• Experience on any configuration management tools like Ansible, Puppet or Chef is a must. 
• Experience in any one of the scripting languages: Shell, Python, etc. 
• Experience in containerization using Docker and orchestration using Kubernetes/EKS/GKE is a must. 
• Solid understanding of SSL and DNS. 
• Experience on deploying and running any open-source monitoring/graphing solution like Prometheus, Grafana, etc. 
• Basic understanding of networking concepts.
• Always adhere to security best practices.
• Knowledge on Bigdata (Hadoop/Druid) systems administration will be a plus.  
• Knowledge on managing and running DBs (MySQL/MariaDB/Postgres) will be an added advantage. 

What you get to do 

• Work with development teams to build and maintain cloud environments to specifications developed closely with multiple teams. Support and automate the deployment of applications into those environments 
• Diagnose and resolve occurring, latent and systemic reliability issues across entire stack: hardware, software, application and network. Work closely with development teams to troubleshoot and resolve application and service issues 
• Continuously improve Conviva SaaS services and infrastructure for availability, performance and security 
• Implement security best practices – primarily patching of operating systems and applications 
• Automate everything. Build proactive monitoring and alerting tools. Provide standards, documentation, and coaching to developers.
• Participate in 12x7 on-call rotations 
• Work with third party service/support providers for installations, support related calls, problem resolutions etc. 

JOB RESPONSIBILITIES:

• Responsible for design, implementation, and continuous improvement on automated CI/CD infrastructure
• Displays technical leadership and oversight of implementation and deployment planning, system integration, ongoing data validation processes, quality assurance, delivery, operations, and sustainability of technical solutions
• Responsible for designing topology to meet requirements for uptime, availability, scalability, robustness, fault tolerance & security
• Implement proactive measures for automated detection and resolution of recurring operational issues
• Lead operational support team manage incidents, document root cause and tracking preventive measures
• Identifying and deploying cybersecurity measures by continuously validating/fixing vulnerability assessment reports and risk management
• Responsible for the design and development of tools, installation procedures
• Develops and maintains accurate estimates, timelines, project plans, and status reports
• Organize and maintain packaging and deployment of various internal modules and third-party vendor libraries
• Responsible for the employment, timely performance evaluation, counselling, employee development, and discipline of assigned employees.
• Participates in calls and meetings with customers, vendors, and internal teams on regular basis.
• Perform infrastructure cost analysis and optimization

SKILLS & ABILITIES

Experience: Minimum of 10 years of experience with good technical knowledge regarding build, release, and systems engineering

Technical Skills:

• Experience with DevOps toolchains such as Docker, Rancher, Kubernetes, Bitbucket
• Experience with Apache, Nginx, Tomcat, Prometheus ,Grafana
• Ability to learn/use a wide variety of open-source technologies and tools
• Sound understanding of cloud technologies preferably AWS technologies
• Linux, Windows, Scripting, Configuration Management, Build and Release Engineering
• 6 years of experience in DevOps practices, with a good understanding of DevOps and Agile principles
• Good scripting skills (Python/Perl/Ruby/Bash)
• Experience with standard continuous integration tools Jenkins/Bitbucket Pipelines
• Work on software configuration management systems (Puppet/Chef/Salt/Ansible)
• Microsoft Office Suite (Word, Excel, PowerPoint, Visio, Outlook) and other business productivity tools
• Working knowledge on HSM and PKI (Good to have)

Location:

• Bangalore

Experience:

• 10 + Years.

Hands on Experience with Linux administration

Experience using Python or Shell scripting (for Automation) 

Hands-on experience with Implementation of CI/CD Processes 

Experience working  with one cloud platforms (AWS or Azure or Google) 

Experience working with configuration management tools such as Ansible & Chef 

Experience working with  Containerization tool Docker.

Experience working with Container Orchestration tool Kubernetes.

Experience in source Control Management including SVN and/or Bitbucket

& GitHub

Experience with setup & management of monitoring tools like Nagios, Sensu & Prometheus or any other popular tools 

Hands-on experience in Linux, Scripting Language & AWS is mandatory

Troubleshoot and Triage development, Production issues