DevSecOps Engineer

Salary: Rp 10.000.000 – Rp 15.000.000 per month

• Bachelor Degree of Information Technology/ Any Major

• Minimum 2 years experince as DevOps Engineer

• Pengalaman dengan cloud security (AWS)

• Pengalaman dengan container orchestration (EKS/Kubernetes)

• Pengalaman dengan CI/CD tools (Jenkins, ArgoCD, GitLab CI)

• Pengalaman dengan security tools (SAST, DAST, container security, OSS scanning)

• Pemahaman tentang networking dan firewall

• Pemahaman tentang identity management dan PAM

### Tools yang Dikuasai

• Firewall: Palo Alto Networks

• CDN & Web Security: Akamai / Cloudflare

• Cloud: AWS

• Image Repository: Nexus Repository / GitLab

• Image Security Scanning: Aqua / Palo Alto

• Container Runtime Security: Aqua / Palo Alto

• OSS Scanning: Nexus IQ / GitLab

• SAST: Fortify / GitLab

• CI: Jenkins / GitLab CI

• CD: ArgoCD

• Monitoring: Datadog

• Managed SOC: Defenxor + Wazuh

• PAM: Delinea / CyberArk

• Entra ID: MS365 E5

• SSL: DigiCert / AWS Certificate Manager

• Project Management: Jira / GitLab

• Documentation: Confluence / GitLab

• Source Code: Bitbucket / GitLab

## Tanggung Jawab Utama

1. Keamanan Infrastructure & Cloud

- Mengelola dan mengkonfigurasi firewall (Palo Alto Networks)

- Mengkonfigurasi CDN dan web security protection (Akamai / Cloudflare)

- Mengelola AWS environment (SSO, Control Tower, SCP, IAM, KMS, EKS, EC2, S3, SES, Kafka, Valkey, RDS, MongoDB Atlas, VPC, SNS, SQS, Backup)

- Menerapkan standardisasi VPC subnet (App, DB, DMZ, Mgmt, NPRD App, NPRD DB)

- Mengkonfigurasi VPN access (Global Protect SASE / Palo Alto)

2. Software Supply Chain Security

- Mengelola image repository (Nexus Repository / GitLab)

- Menjalankan image security scanning (Aqua / Palo Alto)

- Mengelola container runtime security (Aqua / Palo Alto)

- Mengelola OSS vulnerability scanning (Nexus IQ / GitLab)

- Menjalankan static application security testing (SAST) (Fortify / GitLab)

3. CI/CD Pipeline Security

- Membangun dan memelihara pipeline CI (Jenkins / GitLab CI)

- Mengelola pipeline CD (ArgoCD)

- Mengintegrasikan security tools ke dalam pipeline (Aqua, Nexus IQ, Fortify, GitLab)

- Menerapkan policy sebagai code

4. Monitoring & Logging

- Mengelola monitoring tools (Datadog)

- Mengelola Managed SOC (Defenxor dengan Wazuh di setiap cluster)

- Mengkonfigurasi integrasi syslog EKS

5. Identity & Access Management

- Mengelola identitas dan akses (Entra ID - MS365 E5)

- Mengelola PAM (Privileged Access Management) (Delinea / CyberArk)

- Mengkonfigurasi SSO (AWS SSO)

6. Certificate & Secrets Management

- Mengelola SSL/TLS certificates (DigiCert / AWS Certificate Manager)

7. Vulnerability Management

- Mengelola cybersecurity dan exposure management (Tenable / Palo Alto)

8. Collaboration & Documentation

- Manajemen proyek (Jira / GitLab)

- ITSM (Jira Service Management / GitLab)

- Dokumentasi (Confluence / GitLab)

- Source code repository (Bitbucket / GitLab)