DevSecOps Engineer

Responsibilities:

• Build and maintain CI/CD pipelines that support Agile teams and ARTs.
• Provision and manage environments (development, test, staging, production).
• Use infrastructure as Code (IaC) tools (i.e., Terraform, Helmfile, Ansible, Kubernetes Manifests) to ensure re-producibility and compliance.
• Ensure high availability and resilience in cloud and on-prem environments (e.g., zero-downtime deployment, blue/green and canary release strategies)
• Manage the automation and toolchain integration for code quality, security scanning, release management and monitoring; automate repetitive tasks to improve flow efficiency across the value stream, ensure the toolchain aligns with the Lean-Agile principles.
• Work closely with System Architects, Release Train Engineers (RTEs) and agile teams to align on delivery practices.
• Provide DevOps coaching to teams so they adopt the right practices for version control, branching strategies, and automated testing.
• Support Program Increment (PI) planning by ensuring environments and pipelines is ready.
• Develop security practices (e.g., Secrets Management) into the software delivery CI pipelines to ensure the artefacts are of the premium quality level (shift-left security).
• Automate compliance checks and enforce policies (e.g., code signing, container scanning).
• Develop systems observability practices (e.g., monitoring, logs, traces) to define and track metrics like deployment frequency, lead time for changes, change failure rate, and MTTR.
• Collaborate with InfoSec and Compliance teams to run regular security audits, risk assessments and data assessments.
• Contribute to disaster recovery planning and testing.

· Work in an agile, cross-functional multinational team, actively engaging to support the success of the team.

Requirements:

Education

· Bachelors in Computer Science or Information Technology

· Recognized Engineering degree

Essential Skills/Experience

• Strong expertise in Linux Operating System (i.e., Linux Process Sub-systems, Linux FileSystem)
• Strong expertise in Linux shell scripting (i.e., bash scripting)
• Strong expertise in designing and deploying Continuous Integration Pipelines for Software Development Teams
• Strong expertise in Secrets Management and Configuration Management of subsystems in a Container Orchestration Framework, such as Kubernetes.
• Strong expertise in designing, deploying & securing OCI containerized workloads (e.g., Docker, Kaniko) in Container Orchestration Frameworks (e.g., Kubernetes) running on-top of on-premises infrastructure and cloud infrastructure.
• Strong expertise in designing and implementing pro-active monitoring of production grade environments, incident response and allows swift mitigation of security threats.
• Expertise with observability tools like OpenTelemetry (OTEL) for monitoring and instrumentation, ensuring comprehensive visibility into system health and performance in Container Orchestration Frameworks.
• Demonstrated experience in working in data center environments; bonus if you have relevant experience on working in mission critical systems.
• Demonstrated ownership of the DevSecOps Mindset and demonstrated experiences of guiding the Software Development Teams in embracing the DevSecOps Mindset.
• Demonstrated experience in working in a multi-cultural and multi-disciplinary environment.
• Good communication skills in English.

Desirable Skills/Experience

If you have the following desirable skills and relevant experiences, it would be an added advantage!

• Relevant certifications such as Certified Kubernetes Administrator (CKA) or Certified Kubernetes Security Specialist (CKSS).
• Familiarity with popular DevOps tools (e.g., Jenkins, Git, Terraform) to enhance our Kubernetes development pipeline.
• Experience with CI/CD tools and practices integrated with Kubernetes, driving continuous improvement and deployment.
• Familiar with cloud-native deployment strategies to cloud service providers (e.g., Azure Cloud, Amazon Cloud, Google Cloud).
• Familiar with the main cloud service models: Software as a Service, Platform as a Service and Infrastructure as a Service.

Essential / Desirable Traits

· Possess learning agility, flexibility and pro-activity

· Comfortable with agile teamwork and user engagement