DevSecOps - 9935

Package Description

Excellent Salary.

Corporate Benefits Package.

Chance to make a positive difference in a company passionate about diversity and inclusion.

Further information available from the Serco Europe Recruitment Team.

Job Introduction

• Proficiency with cloud technologies and infrastructure.
• AWS and/or Azure expertise: solution delivery expertise, migration of applications to the cloud, automation through third-party tools, Infrastructure as code (IaC).
• Solid knowledge of micro-services architecture design, development, deployment, and instrumentation.
• Solid knowledge of secure application design and development in the cloud.
• Solid knowledge of network architecture, network security and TCP/IP, network virtualization and/or software defined networks.
• Solid knowledge and understanding of scripting and secure configurations for mainstream Linux operating systems.
• Knowledge of cloud logging, reporting, and monitoring solutions.
• Knowledge of a broad range of application architectures and languages.
• Ability to manage multiple priorities and work effectively in a fast-paced, high volume, results driven environment.
• Excellent communication skills (both oral/written) including ability to clearly communicate risks and risk management issues to technologists and non-technologists.
• Knowledge of relational database management systems such as MS SQL, Oracle with an experience with working with big databases (at least 5TB in size).
• Knowledge of Machine Learning, Deep Learning and Artificial Intelligence technologies.
• Ability to give business and technical presentations and actual experience with giving such presentations.
• Ability to apply high quality standards.
• Ability to cope with fast changing technologies.
• Analysis and problem solving skills.
• Ability to design services to satisfy business objectives, based on the quality, compliance, risk and security requirements, delivering more effective and efficient IT and organisation solutions and services aligned to organisational needs

Main Responsibilities

• Provide technical support to DevSecOps team.
• Provide technical and architectural subject matter expertise to the various development teams including communicating architectural decisions and mentoring other technical staff around the various security technologies and decisions.
• Plan, implement, upgrade DevSecOps pipelines
• Facilitate the continuous delivery of IT applications by using Application Lifecycle Management and automation tools.
• Promote the usage of DevSecOps methodologies for IT projects.
• Architect and design API Security, Container Security, Cloud Security.
• Support technical analysis and recommendations (e.g., evaluate and select vendor products based on functional, security and operational requirements; review and comment on their functionalities).
• Work closely with data experts to develop and deliver data-oriented architecture solutions.
• Define and maintain the architectural frameworks/patterns, processes, standards, and guidelines related to systems, business or data architecture.
• Designing security controls, processes and procedures for systems implemented using public cloud.
• Implement technological solutions dedicated to security and data protection in public cloud.
• Develop metrics and dashboards to measure and validate the effectiveness.
• Review of the architecture of existing systems to migrate of existing system in the cloud.
• Evaluate systems for discrepancies or vulnerabilities.
• Conduct research to find ways to improve operations.
• Define, review, maintain and help executing cloud exit strategy.
• Interaction with the business analysts, solution architects, project leaders and the developers

Successful Candidate

• Strong experience (at least 5 years) with public cloud environments and technologies, including Amazon Web Services (AWS) or Azure.
• Experience (at least 3 years) in cloud architecture and security fundamentals including containers, software-defined networks, high availability design, multi-cloud, serverless compute, infrastructure as code.
• Very strong experience as DevSecOps in the following topics:
  • Infrastructure as code: Terraform or similar related technologies (min 2 yrs)
  • CI/CD and pipelines: Gitlab or similar technologies (minimum 2 yrs)
  • Docker, Kubernetes and similar (min 2 yrs)
• Experience in design and implementation of automation scripts: Python, Perl, bash, or similar Linux scripting (min 3 yrs).
• Experience in Linux management (min 3 yrs).
• Experience migrating to or building natively in a cloud environment including monolithic applications, microservices, and functions as a service is an asset.
• Experience with enterprise logging and monitoring solutions, analysis, and correlation of logs.
• Experience in designing secure data-oriented solutions in public cloud.
• Experience (at least 3 years) in working in Agile/Sprint based IT project methodologies.
• Very good expertise in modular and microservices architecture patterns
• Experience in defining, reviewing or executing cloud exit strategies