DevSecops
Summary
Build and secure AWS-based cloud infrastructure using Python, Java, and IaC tools like CloudFormation/CDK, automating security controls and CI/CD pipelines for scalable, highly available applications.
Job Description for DevSecops in Sydney.
Skill:
3+ years of extensive Python proficiency
3+ years of Java Experience
Extensive exposure to:
Javascript
Jenkins
Code Pipeline + CodeBuild
AWS' ecosystem
AWS Well Architected Framework
Trusted Advisor
GuardDuty / SCP / SSM / IAM / WAF
Deep understanding of automation, quality engineering, architectural methodologies, principles, and solution design
Hands on experience with Infrastructure-As-Code tools to automate deployments in AWS, preferably CloudFormation and CDK
Familiarity with operational observability, including log aggregation, application performance monitoring, etc
Experience deploying auto-scaling and load-balanced / Highly Available applications
Be familiar with CI/CD pipelines and use of tools such as Code Build, Code Deploy, Code Pipeline.
Hands-On experience in managing certificates (client-server, mutual TLS, etc)
Scope:
Improve the automation of security controls
Work closely with the consumer showback team on defining processes and system requirements
Design and implement updates to the showback platform including
Cloud Conformity
WAF status
Certificate Management
Work with STO/account owners to uplift the security posture of consumer accounts using, at least:
Show back platform
Trusted advisor
Risk management process
Work with the Onboarding team to ensure that security standards and policies are being setup and configured correctly
Work on some items from the Cloud Security LRP, implementing enterprise minimum security requirements
Data Masking
Encryption monitoring
Perimeter protections
Ingress / Egress uplift
Integration of SailPoint for SSO Management
Let me know if you have any questions.