DevSecOps Engineer

Job Title

Primary Skill - Java and cloud native Secondary skill - GitLab CI,AWS,AZURE

• Software Architecture (from monoliths to microservices and serverless)

• Building the software (development and build scripts)-need some basic understanding on how to run and build that project. If you need to adjust/debug the application, experience or familiarity with the programming language is required.

• Packaging (containers: Docker | Serverless)- need to be able to understand and package applications into these new standards

• Continuous integration/delivery (CI/CD tools like Jenkins, GitLab, Travis and friends)

• Container Schedulers and Orchestrators (Kubernetes, Docker Swarm, DC/OS)

• Building the infrastructure (the operations part)-build the infrastructure where that code will run. This involves a mix of managed services and writing code for the missing parts. Tools like Terraform, Cloud Formation, Ansible are the usual suspects in this area.

• Monitoring and observability-need to look into SaaS solutions, the default services offered by your cloud, or rely on open source projects (like Prometheus/Grafana).

• Cloud computing building blocks-Understanding of cloud computing primitives like compute units, databases, storage, network for whatever cloud/infrastructure provider you are using is mandatory. Understanding pricing for the new services will help you avoid nasty surprises at the end of the month.

• Deployment patterns for your application a) Canary deployments b) GitOps c) Networking for microservice architecture d) Service mesh (istio, envoy) e) Security for cloud architecture f) container vulnerability scans g) Secrets management