Senior DevOps Engineer

Automation and CI/CD Optimization:

Design, create and optimize CI/CD pipelines in GitLab, contribute to the templatization framework and make sure most pipeline code is reusable across various microservices, implementing best practices for efficiency and reliability.

Infrastructure as Code (IaC):

Create Terraform Modules that are reusable in various implementation Infrastructure as Code (IAC). Modules have to follow best practices and security guidelines concurred internally. Use Ansible for configuration management and automation of server setups (TSDB, PGPool, Looker VM etc.), ensuring consistency across environments.

Containerization and Orchestration:

Implement secure containerization using tools like Docker and Kubernetes, ensuring security best practices (e.g., secure image scanning, role-based access control).

Automate deployment processes for containerized applications in a secure and efficient manner. Manage complex Kubernetes clusters, including advanced networking, security, and resource management. Create and maintain Helm charts for complex Kubernetes orchestration

Cloud Security:

Work with cloud providers (AWS, Azure, GCP) to design secure cloud infrastructure, ensuring compliance with security frameworks and best practices.

Implement security controls such as encryption, IAM, and network security in cloud environments.

Incident Response and Threat Detection:

Investigate and mitigate security incidents and vulnerabilities in a timely and efficient manner.

Collaborate with security teams to identify, analyze, and patch security vulnerabilities within the CI/CD pipeline and infrastructure.

Collaboration with Development and Security Teams:

Work closely with developers to ensure security is integrated from the beginning of the development lifecycle.

Collaborate with cybersecurity professionals to ensure the infrastructure and applications meet compliance standards.

Documentation and Reporting:

Document the DevOps processes, security procedures, and compliance reports.

Ensure accurate and timely reporting of security status and activities to stakeholders and management.

Key Stakeholders - Internal

Department Heads

IT Team

Product Management Team

Risk Management Teams

Project Management Office (PMO)

Human Resources

Key Stakeholders - External

Cloud Service Providers

Third-Party Vendors & Consultants

Regulatory Bodies

External Auditors