DevSecOps Engineer

This role involves designing, implementing, and maintaining secure CI/CD pipelines, owning production services, ensuring monitoring, troubleshooting issues, and building scalable, fault-tolerant cloud infrastructure. It requires integrating security practices into the SDLC, conducting security assessments, and developing IaC templates. The engineer will also monitor and respond to incidents, stay updated on security threats, and mentor junior team members, playing a pivotal role in infrastructure security, scalability, and reliability.

Must Have

• Design, implement, and maintain secure CI/CD pipelines.
• Own Helpshift production services and ensure complete monitoring coverage.
• Troubleshoot and fix production issues.
• Build seamless zero-downtime processes to upgrade core infrastructure.
• Collaborate with development and operations teams to integrate security practices.
• Conduct regular security assessments, vulnerability scans, and penetration testing.
• Develop and maintain infrastructure as code (IaC) templates.
• Monitor and respond to production incidents.
• Stay up-to-date with the latest security threats, vulnerabilities, and best practices.
• Relevant experience of 5+ years and above.
• In-depth knowledge of running/managing UNIX-like operating systems (Ubuntu).
• Strong knowledge of networking protocols, security architectures, and IAM principles.
• Experience with containerisation technologies (Docker, Kubernetes) and securing environments.
• Experience in designing and building highly scalable, fault-tolerant and cost-effective solutions.
• Experience of various FOSS tools for monitoring, graphing, capacity planning, and logging.
• Experience with IaaC tools like Ansible, Puppet, Terraform.
• Experience with Cloud Computing platforms like Amazon AWS, Google Cloud Platform, Heroku.
• Experience with managing NoSQL and RDBMS.
• Experience with queuing systems (Kafka, RabbitMQ) and Big data platforms (Hadoop).
• Good programming skills with focus on scripting (Python, Shell, Perl).
• Ability to analyse bottlenecks in architecture and quickly debug to reach resolution for issues.
• Have an automation mindset and ability to reason and work with complex systems.
• Excellent communication and documentation skills.
• Quick learner and good mentor for junior team members.

Description

Responsibilities:

• Design, implement, and maintain secure CI/CD pipelines for automating deployment, configuration, and testing processes.
• Own Helpshift production services and ensure complete monitoring coverage, troubleshoot and fix production issues.
• Build a seamless zero-downtime process to upgrade our core infrastructure (ScyllaDB, Elasticsearch, Kafka, MongoDB, Redis)Move us to a region with no downtime. Build a cloud infrastructure that’ll be easy to move to a different cloud service provider.
• Collaborate with development and operations teams to integrate security practices into the software development lifecycle.
• Conduct regular security assessments, vulnerability scans, and penetration testing to identify and mitigate security risks.
• Develop and maintain infrastructure as code (IaC) templates for provisioning and configuring cloud resources securely.
• Monitor and respond to production incidents, including investigation, containment, and remediation activities.
• Stay up-to-date with the latest security threats, vulnerabilities, and best practices, and make recommendations for continuous improvement.
• You will play a pivotal role in ensuring the security, scalability, and reliability of our infrastructure and applications.
• You will collaborate closely with cross-functional teams to implement security best practices throughout the development lifecycle, automate security processes, and enhance our overall DevSecOps capabilities.
• Mentor Junior Team members

Requirements

• Relevant experience of 5+ years and above.
• In-depth knowledge of running/managing UNIX-like operating systems (we use Ubuntu).
• Strong knowledge of networking protocols, security architectures, and identity and access management (IAM) principles.
• * Experience with containerisation technologies (e.g., Docker, Kubernetes) and securing containerised environments.
• Experience in Designing and building solutions that are highly scalable, fault tolerant and cost-effective
• Experience of various FOSS tools for monitoring, graphing, capacity planning, and logging.
• Experience with IaaC tools like Ansible, Puppet, Terraform.
• Experience with Cloud Computing platforms like Amazon AWS, Google Cloud Platform, Heroku.
• Experience with managing NoSQL and RDBMS
• Experience with queuing systems (Kafka, RabbitMQ) and Big data platforms (Hadoop).
• Good programming skills with focus on scripting (Python, Shell, Perl).
• Ability to analyse bottlenecks in architecture and quickly debug to reach resolution for issues.
• Have an automation mindset and ability to reason and work with complex systems.
• Excellent communication and documentation skills.
• Quick learner and good mentor for junior team members.