DevOps Engineer (Contract)

Ambient Property Technologies; Brasil; Teletrabalho; BRL 60.000 - 100.000; Tempo integral

Resumo da oferta

Ein innovatives Unternehmen sucht einen erfahrenen DevOps Engineer, der sich auf Sicherheitspraktiken spezialisiert hat. In dieser spannenden Rolle arbeiten Sie remote und sind verantwortlich für die Implementierung von Sicherheitsbestimmungen in AWS-basierten Umgebungen. Sie werden eng mit verschiedenen Teams zusammenarbeiten, um Sicherheitsrichtlinien zu definieren und sicherzustellen, dass alle Prozesse den höchsten Standards entsprechen. Wenn Sie ein kreativer Problemlöser sind, der in einem dynamischen Umfeld arbeiten möchte, ist diese Gelegenheit perfekt für Sie.

Qualificações

• 5-7 Jahre Erfahrung in DevSecOps oder verwandten Bereichen.
• Expertise in Terraform und AWS-Infrastrukturmanagement.

Responsabilidades

• Implementierung von Sicherheitspraktiken mit Infrastructure as Code (IaC) unter Verwendung von Terraform.
• Verwaltung und Sicherung von Amazon EKS-Clusters.

Conhecimentos

Terraform

AWS

Kubernetes

HashiCorp Vault

Python

Bash

CI/CD Pipelines

Security Best Practices

Vulnerability Scanning

Compliance Frameworks

Ferramentas

Amazon EKS

AWS Secrets Manager

GitHub Actions

Snyk

Trivy

SonarQube

Descrição da oferta de emprego

Join to apply for the DevOps Engineer (Contract) role at Ambient Property Technologies.

Ambient combines a decade of operational experience with design and engineering prowess to improve apartment living and management in the most impactful, cost-effective way possible.

The name "Ambient" embodies our vision to create a category-defining platform that seamlessly integrates smart technology into the built environment and transforms the way people live, visit, and work in multifamily communities. Our focus is on increasing the value of multifamily properties by making them more efficient to operate and more comfortable to live in.

Overview

We're looking for a DevOps Engineer with a strong background in security to work with our engineering team on a contract basis. We look for strategic thinkers and creative problem solvers with a bias for execution.

Note: This is a remote contract position that can be held in either Brazil or Argentina.

Key Responsibilities

• Implement security best practices within Infrastructure as Code (IaC) using Terraform for AWS-based environments.
• Manage and secure Amazon EKS clusters, ensuring proper access controls, secrets management, and runtime security.
• Implement and maintain HashiCorp Vault, AWS KMS, and AWS Secrets Manager for secure storage and retrieval of secrets.
• Integrate security early in the CI/CD pipelines using static code analysis, vulnerability scanning, and compliance checks.
• Design and enforce security policies around containerized deployments and Kubernetes security best practices.
• Automate security scanning using tools like Snyk, Trivy, Checkov, SonarQube, or similar.
• Develop automation scripts in Python, Bash, or other scripting languages to streamline security processes.
• Implement security controls within GitHub Actions and other CI/CD pipelines for secure application delivery.
• Set up security monitoring, logging, and alerting for compliance with SOC2, ISO 27001, and CIS benchmarks.
• Collaborate with DevOps, Security, and Engineering teams to define security guidelines and document security processes.

Required Skills & Qualifications

• 5-7 years of experience in DevSecOps, Security Engineering, or related fields.
• Expertise in Terraform for IaC and managing AWS infrastructure securely.
• Hands-on experience with Amazon EKS and securing Kubernetes environments.
• Proficiency with HashiCorp Vault, AWS KMS, and AWS Secrets Manager.
• Experience in implementing Shift Left security strategies.
• Hands-on experience with vulnerability and application security testing tools.
• Strong understanding of CI/CD pipelines and security automation using GitHub Actions.
• Proficiency in scripting languages like Python and Bash.
• Experience deploying EDR/MDR/CNAPP tools and threat detection strategies.
• Knowledge of compliance frameworks (SOC2, ISO 27001, NIST, CIS) is a plus.
• Strong problem-solving skills and ability to work in a fast-paced environment.

Preferred Qualifications

• Experience with AWS Security Hub, GuardDuty, CloudTrail, IAM policies, and security monitoring tools like Crowdstrike and Wiz.
• Knowledge of policy-as-code tools like OPA.
• Familiarity with DevSecOps toolchains and threat modeling.