Cloud Security Architect

Job Opportunity: Seeking a DevSecOps Engineer to Strengthen Infrastructure and Development Pipeline

We are looking for a skilled DevSecOps Engineer to build and secure our cloud environments, develop automated solutions for infrastructure and security, and establish DevSecOps best practices across our teams.

• This role is integral to designing and implementing secure, scalable cloud infrastructure with a focus on automation, developing and enforcing security controls within CI/CD pipelines, ensuring code integrity, and enhancing security practices throughout the SDLC.

1. Design Secure Infrastructure: Design, implement, and manage secure cloud infrastructure with a focus on automation, using tools like Terraform and CloudFormation.
2. Develop Security Solutions: Develop and enforce security controls within CI/CD pipelines, ensuring code integrity, and enhancing security practices throughout the SDLC.
3. Vulnerability Assessments: Conduct regular vulnerability assessments, secure configuration reviews, and incident response activities to ensure the security and resilience of our infrastructure and development pipeline.
4. Infrastructure-as-Code: Develop and maintain infrastructure-as-code solutions using tools like Terraform and CloudFormation to automate infrastructure provisioning and management.
5. Monitoring and Alerting Systems: Build and maintain robust monitoring and alerting systems for security events, leveraging tools such as AWS CloudTrail, GuardDuty, or equivalent to detect and respond to potential security threats.
6. DevSecOps Best Practices: Partner with developers to ensure that DevSecOps best practices are applied, including secure coding standards, compliance controls, and identity and access management (IAM).
7. Secrets Management: Implement and manage secrets management, secure key management, and user access policies to protect sensitive information and ensure the confidentiality, integrity, and availability of data.
8. Automation Scripts: Write and maintain scripts to automate security-related tasks, audit logs, and infrastructure management to improve efficiency and reduce manual errors.
9. Root Cause Analysis: Conduct root cause analysis for production incidents, documenting findings and implementing preventive measures to prevent similar incidents from occurring in the future.
10. Team Training: Lead team training sessions to elevate security knowledge and build awareness around secure coding and DevSecOps best practices among team members.

• Cloud Security Experience: Proven experience in implementing security solutions within cloud environments, especially AWS and/or Azure.
• Automation Tools: Experience with infrastructure provisioning and automation tools (e.g., Docker, Ansible, Puppet, Chef, Terraform).
• Scripting Languages: Proficiency in scripting/programming languages such as Python, Bash, or PowerShell.
• CI/CD Tools: Hands-on experience with CI/CD tools (Jenkins, GitLab CI, CircleCI) with a focus on integrating security checks into the CI/CD pipeline.
• IAM and Encryption: Strong understanding of IAM, secrets management (e.g., AWS Secrets Manager), and encryption standards to ensure the security and integrity of data.
• Server and Database Management: Experience managing web and application servers, as well as databases, in cloud-based or containerized environments.
• Problem-Solving Skills: Strong problem-solving skills, with a proactive and analytical approach to resolving security incidents and improving overall security posture.
• Security Certifications: Security certifications (e.g., AWS Certified Security, CISSP, OSCP) are highly valued but not required.

• Education: Bachelor's Degree in Computer Science, Information Security, or a related field.
• Experience: 5+ years of experience in DevSecOps, with a strong background in cloud security and automation.