Job Title: DevSecOps
Role Overview
We are seeking an experienced candidate in DevSecOps to architect, implement, and operationalize secure CI/CD pipelines, cloud environments, Terraform-based infrastructure, and security guardrails across mobile and cloud application teams. The ideal candidate is hands‑on with GitLab pipelines, AWS cloud environments, security tooling, IaC, and performance/scalability tuning. This role will initially be an individual contributor and later grow into a small DevOps/Platform Engineering team lead.
Key Responsibilities
1. CI/CD Pipeline Engineering (GitLab)
- Architect and build GitLab CI/CD pipelines for both mobile (iOS/Android) and cloud applications.
- Develop reusable pipeline templates, shared libraries, and YAML modules for engineering teams.
- Automate environment‑specific build and deploy flows (dev, QA, UAT, prod).
- Enhance build speed, caching strategy, and parallelization for optimal performance.
2. Cloud Deployment, Operations & Security (AWS)
- Design and maintain AWS cloud accounts with strong security guardrails, including:
- IAM roles, policy boundaries, least privilege design
- VPC segmentation, subnets, NACLs, security groups
- AWS Organizations & Service Control Policies (SCPs)
- Implement cost management frameworks: Budgets, cost forecasting, tagging policies, cost optimization.
- Deploy, manage, and optimize:
- EKS / ECS clusters
- EC2, Lambda, API Gateway
- RDS, DynamoDB, S3, CloudFront
- Setup monitoring and observability: CloudWatch, Prometheus/Grafana, ELK/EFK
- Troubleshoot performance, reliability, scaling, and networking issues.
3. Infrastructure as Code (Terraform)
- Build and maintain Terraform modules for AWS infrastructure creation and lifecycle management.
- Implement standard IaC
- Enforce IaC best practices
- Automate AWS environment provisioning across multiple regions and workloads.
4. GitOps, Deployment Automation & Tooling
- Implement automated deployment workflows using: ArgoCD or equivalent.
- Ensure alignment between Git repositories, Terraform states, and actual cloud environments.
- Define deployment strategies: Blue/Green, Canary, Rolling, Feature Flags.
- Integrate secrets management (AWS Secrets Manager, etc).
5. Security, Compliance & Governance
- Build mandatory security steps into pipelines
- Ensure timely VAPT (Vulnerability Assessment & Penetration Testing) cycles and remediation tracking.
- Establish security guardrails:
- Hardened AMIs/containers
- Secure CI/CD runners
- IAM least‑privilege enforcement
- TLS enforcement, encryption in transit & at rest
- Define and enforce compliance with cloud security best practices.
Required Technical Skills
- Deep expertise with GitLab CI/CD (required).
- Strong proficiency in AWS: IAM, VPC, EKS/ECS, CloudFront, S3, Lambda, RDS, security controls.
- Hands-on experience with Terraform.
- Experience in continuous deployment tools.
- Understanding of mobile build pipelines for iOS/Android.
- Expert-level scripting skills: Bash, Python, YAML.
- Strong knowledge of SAST, SCA, container scanning, secrets scanning.
- Experience with:
- Docker/Kubernetes
- CloudWatch, ELK, Prometheus/Grafana
- CDN, WAF, load balancers
- Knowledge of OWASP, CIS Benchmarks, AWS Well-Architected Framework.
- Experience with cost optimization tools like AWS Cost Explorer or CloudHealth.
- Familiarity with provisioning iOS/macOS runners or build agents.
- Experience with incident management, runbooks, and reliability engineering.
Soft Skills
- Strong communication, documentation, and problem-solving skills.
- Ability to collaborate across engineering, security, QA, product, and vendor teams.
- Ownership mindset and ability to lead in ambiguous and fast-moving environments
