Senior DevOps engineer

The Senior DevOps Engineer is responsible for designing, automating, and operating CI/CD pipelines and cloud infrastructure for a large portfolio of applications across on-premises and AWS environments. This role focuses on enhancing deployment speed, reliability, security, and observability through containerization, infrastructure as code, automated testing and scanning, and monitoring solutions. Key Responsibilities Streamline CI/CD delivery for 45 applications using Bitbucket, Bamboo, and Artifactory to support consistent releases across on-premises and AWS environments. Increase delivery efficiency by implementing Docker containerization and automating Kubernetes deployments using Kustomize manifests for scalable, multi-environment release processes. Automate AWS infrastructure provisioning with Terraform, building reusable modules for VPCs, subnets, security groups, and RDS to ensure standardized deployment patterns. Design and manage a fault-tolerant, containerized Prometheus monitoring stack supporting 400 servers and 1,200 endpoints, reducing overhead and improving startup reliability through dependency ordering. Integrate Checkmarx SAST into CI/CD pipelines, enforcing quality gates and reducing high-severity post-deployment vulnerabilities by 40%. Implement AWS WAF rules for geo-restricted access and manage sensitive application configurations through AWS Secrets Manager. Administer Splunk integrations with Active Directory for role-based access, create dashboards, and configure real-time and scheduled alerts to reduce incident response time by 30%. Establish and maintain Git branching strategies to standardize release processes from development to production. Automate builds and deployments using Python and Shell scripting; develop internal dashboards with Python Flask to monitor build status and pipeline health. Integrate Grafana with LDAP/Active Directory for RBAC and create dashboards for performance monitoring, ephemeral port usage, and SSL certificate expiration. Automate SSL/TLS certificate renewals via Ansible in CI/CD pipelines to ensure continuous secure access for critical applications. Required Qualifications Strong experience designing and managing CI/CD pipelines using Bitbucket, Bamboo, and Artifactory. Hands-on experience with Docker, Kubernetes, and Kustomize for containerization and deployment automation. Expertise with Terraform for infrastructure as code and AWS services including VPC, RDS, WAF, and Secrets Manager. Experience implementing monitoring solutions using Prometheus and Grafana. Experience administering Splunk, LDAP/Active Directory integrations, and alerting workflows. Proficiency in scripting with Python and Shell. Experience using Ansible for automation and certificate management. Strong understanding of DevSecOps practices including SAST and automated security scanning. Ability to design reliable, scalable, and secure cloud and on-premises infrastructure. Preferred Qualifications Experience building internal dashboards or automation tools using frameworks such as Flask. Experience supporting high-availability and high-performance application environments. #J-18808-Ljbffr Compunnel