Sr. AWS DevSecOps Engineer

We are seeking a highly motivated and experienced DevOps Engineer to join our team and champion a DevSecOps culture. This role will be focused on designing, building, and maintaining our CI / CD pipelines, with a specific focus on secure Java application builds, branching strategies, and automated deployments. The ideal candidate will be proficient in scripting (Python, Bash, and Groovy), have a strong understanding of Jenkins pipeline development, including the use of shared libraries, infrastructure as code, modern DevOps practices, and a security-first mindset. Additionally, a solid understanding of QA automation testing tools is beneficial, and proficiency with Selenium is considered an added advantage. You will play a critical role in enabling our development and QA teams to deliver high-quality, secure software rapidly and reliably.

Responsibilities :

• Secure CI / CD Pipeline Development : Design, implement, and maintain robust, automated, and secure CI / CD pipelines using Jenkins and other relevant tools. This includes integrating security scanning and testing tools into the pipeline.
• Secure Java Build Expertise : Optimize and troubleshoot Java application builds, ensuring security best practices (including dependency management, vulnerability scanning), artifact repository management (Nexus, Artifactory) and build performance.
• Secure Branching Strategy Management : Implement and maintain effective and secure branching strategies (e.g., Gitflow, Trunk-Based Development), ensuring secure collaboration between development teams and preventing unauthorized code merges.
• Infrastructure as Code (IaC) with Security : Leverage IaC tools (e.g., Terraform, CloudFormation, Ansible) to automate secure infrastructure provisioning, configuration, and management for our CI / CD environment. This includes implementing security policies and access controls in code.
• Secure Jenkins Pipeline Development with Groovy : Develop complex, efficient, maintainable, and secure Jenkins pipelines using Groovy scripting, that integrate testing, security code quality checks, and automated deployments. This includes the use of shared libraries for reusable pipeline logic.
• Shared Library Development : Develop and maintain reusable Jenkins shared libraries using Groovy to encapsulate common CI / CD logic, promoting consistency and maintainability across pipelines.
• Scripting and Automation for Security : Utilize scripting (Python, Bash, and Groovy) to automate repetitive tasks, enhance CI / CD workflows, integrate security tools, and create custom tools to improve development and security productivity.
• Monitoring and Logging with Security Focus : Implement secure monitoring and logging solutions to proactively identify and address potential security vulnerabilities, performance issues, and malicious behavior in the CI / CD pipelines.
• Security Collaboration : Collaborate closely with security teams, development teams, QA, and other stakeholders to understand their needs, deliver secure solutions, and participate in security reviews.
• Continuous Security Improvement : Continuously identify areas for improvement within our CI / CD processes and infrastructure from a security perspective, and implement security best practices to improve efficiency and reliability.
• Documentation with Security Focus : Create and maintain clear, comprehensive, and security focused documentation for all CI / CD processes, infrastructure, and security controls.
• Vulnerability and Security Assessment : Perform regular vulnerability assessments of the CI / CD infrastructure and application codebase to identify and fix potential weaknesses.
• Threat Modeling : Conduct threat modeling exercises to identify potential security risks in the CI / CD process.
• Troubleshooting with Security Awareness : Troubleshoot issues with the CI / CD pipeline, build processes, deployments, and other areas related to the build system, always with security as a key concern.
• Integrate QA automation tools and frameworks within the CI / CD pipeline, enabling automated testing of new builds.
• Stay up to date with Security : Stay abreast of industry trends and emerging DevOps and security technologies and practices.

Minimum Qualification

Skills Required

DAST, Elk, Maven, Prometheus, Artifactory, Grafana, Groovy, Docker, Terraform, SAST, Nexus, Selenium, Python, Aws, Java, Cloudformation, Bash, Jenkins, SCA, Gradle, Gcp, Ansible, Azure, Kubernetes