SR. Devops Engineer

Information Security Manager shall be primarily responsible to :

• Run and manage the BAU security infosec operations
• Create and maintain ISMS Policy and Process documents
• Ensure Infosec compliance with RBI and other regulatory agencies
• Participate in IT / Infosec Audits and ensure closure of observations within given timeliness
• Conduct regular VAPT (Vulnerability Assessments) and track closure of open observations
• Identifying and evaluating new IT security technologies and services and implementing it
• Ensure cyber security related polices and technologies are in place
• Conducting regular Inforsec Awareness within users in the organization
• The person needs to work closely with the CISO and other stakeholders – Risk, IT and Audit teams.

Key Accountability:

• Ensuring adequate security controls are in place & working effectively within the organization for information & cyber security
• Ensuring effectiveness of all IT controls to prevent any unauthorized access or activities at a system administration level
• Identify potential security weaknesses through vulnerability assessments and track them to closure within the timeliness
• Tracking and reporting key risk indicators defined for IT processes
• Create and maintain the documentation for information system audits in accordance with regulatory and compliance requirements
• Create / Review ISMS policy and process
• Implement Strategic IT Infosec projects to strengthen the overall IT Security posture

What we look for:

As a DevOps Developer, you will contribute to a thriving and growing AIGovernance Engineering team. You will work in a Kubernetes-based microservices environment to support our bleeding-edge cloud services. This will include custom solutions, as well as open source DevOps tools (build and deploy automation, monitoring and data gathering for our software delivery pipeline). You will also be contributing to our continuous improvement and continuous delivery while increasing maturity of DevOps and agile adoption practices.

Responsibilities:

• Ability to deploy software using orchestrators /scripts/Automation on Hybrid and Public clouds like AWS
• Ability to write shell/python/ or any unix scripts
• Working Knowledge on Docker & Kubernetes
• Ability to create pipelines using Jenkins or any CI/CD tool and GitOps tool like ArgoCD
• Working knowledge of Git as a source control system and defect tracking system
• Ability to debug and troubleshoot deployment issues
• Ability to use tools for faster resolution of issues
• Excellent communication and soft skills
• Passionate and ability work and deliver in a multi-team environment
• Good team player
• Flexible and quick learner
• Ability to write docker files, Kubernetes yaml files / Helm charts
• Experience with monitoring tools like Nagios, Prometheus and visualisation tools such as Grafana.
• Ability to write Ansible, terraform scripts
• Linux System experience and Administration
• Effective cross-functional leadership skills: working with engineering and operational teams to ensure systems are secure, scalable, and reliable.
• Ability to review deployment and operational environments, i.e., execute initiatives to reduce failure, troubleshoot issues across the entire infrastructure stack, expand monitoring capabilities, and manage technical operations.

Experience Required: 5 -10 yrs.

Job location: Sec-62, Noida

Work from office (Hybrid)

Development Platform: Backend Development- Java/J2EE, Struts, Spring, MySQL, OWASP

Job Brief:

Requirements:

·      5+ years of experience in developing distributed, multi-tier enterprise applications, APIs.

·      Fully participated in several major product development cycles.

·      Solid background in design, OOP, object, and data modelling.

·      Deep working knowledge of Java, Struts,Spring, Relational Database.

·      Experience in design and implementation of service interface and public APIs.

·      Actively involved/writing codes in current project.

·      Development knowledge and experience of working with AWS, Azure etc. will be an added plus.

·      Clear Understanding and Hands on experience on OWASP Top 10 Vulnerability standards like XSS, CSRF, SQL injection, session hijacking, and authorization bypass vulnerabilities.

·      Find and resolve the security concerns on the product/application.

·      Good Documentation, reporting, Strong communication, and collaboration skills with various levels of executives from top management to technical team members across the organization.

·      Strong self-starter who can operate independently.