Implement, and maintain secure, scalable, and automated cloud infrastructure by embedding DevSecOps practices across the software development lifecycle (SDLC).
Requirements
- Build, and maintain secure, scalable infrastructure using Infrastructure as Code (IaC) with Terraform.
- Automate deployment, configuration, and management of infrastructure and services.
- Monitor and optimize infrastructure performance, reliability, and cost efficiency.
- Implement and manage CI/CD pipelines with integrated security controls.
- Deploy and manage Kubernetes workloads using Helm charts for standardized, repeatable application delivery.
- Integrate security into all stages of the IaC and CI/CD pipelines.
- Conduct regular security assessments, CSPM, audits, and threat modelling.
- Monitor cloud environments for security incidents and lead incident response.
- Enforce security policies aligned with frameworks like CIS, NIST, and ISO 27001.
- Utilize cloud-native security tools (e.g., AWS Security Hub, Azure Defender).
- Work closely with development, QA, and operations teams to ensure secure and seamless integration.
- Document infrastructure designs, configurations, and processes.
- Continuously improve technical skills in cloud platforms, security tools, and automation.
- Participate in internal knowledge-sharing sessions and contribute to team capability building.