DevSecOps Engineer

Lembaga Pengkajian Pangan, Obat-Obatan dan Kosmetika MUI; Bogor; On-site; IDR 279,000,000 - 502,200,000; Full time

Job summary

Lembaga Pengkajian Pangan, Obat-Obatan dan Kosmetika MUI seeks a DevSecOps professional to build secure, automated infrastructure on Google Cloud Platform, aligning with ISO 27001 standards. You will manage CI/CD pipelines, cloud architecture, and security operations across on-premises and cloud resources.

The role requires hands-on expertise in Linux, IaC, containerization (Docker/Kubernetes), SIEM (Wazuh), and monitoring stacks (Prometheus/Grafana/ELK).

Qualifications

• 3 years minimum as a DevSecOps, DevOps, or Cloud Security Engineer.
• Experience with Linux OS (Ubuntu/CentOS/Debian) and basic networking.

Responsibilities

• Build and maintain CI/CD pipelines for automated, secure deployments.
• Install, configure, and maintain physical and virtual servers.
• Manage cloud architecture on GCP and infrastructure.
• Oversee secure connectivity (SSH, VPN) and network security policies.
• Deploy and monitor centralized security using Wazuh SIEM.
• Ensure ISO 27001 compliance across deployments and operations.
• Set up and维护 monitoring/logging (Prometheus, Grafana, ELK).
• Develop backup procedures and disaster recovery plans.

Skills

Linux

CI/CD

Cloud security

GCP

Networking basics

IaC

SIEM

Wazuh

Monitoring

Tools

GitLab CI

GitHub Actions

Jenkins

Docker

Kubernetes

Terraform

Ansible

Proxmox VE

GKE

Prometheus

Grafana

ELK Stack

Wazuh

Job description

We are looking for a DevSecOps professional with a background in DevOps or Cloud Security Engineering to join our team. This role focuses on building and maintaining secure, automated infrastructure on Google Cloud Platform (GCP), combining infrastructure management, security implementation, and operational excellence to enable fast, secure application deployments while ensuring compliance with ISO 27001 standards.

Key responsibilities

• Build and maintain CI/CD pipelines to ensure automated, fast, and secure application deployments
• Install, configure, and maintain physical and virtual servers
• Manage cloud architecture and infrastructure, with a strong focus on Google Cloud Platform (GCP)
• Manage networking, routing, SSH, and tunneling/VPN protocols to ensure secure and high-performance infrastructure connectivity
• Design and implement network security policies, including the configuration of Hardware and Cloud-based Firewalls
• Deploy, configure, and monitor centralized security using SIEM Wazuh for threat detection, log analysis, and incident response
• Ensure all IT infrastructure, deployments, and server operations are fully compliant with ISO 27001 security standards
• Setup and maintain monitoring and logging systems (Prometheus, Grafana, ELK Stack) to track server health and detect security anomalies
• Design and execute comprehensive Backup procedures and Disaster Recovery Plans (DRP)

Qualifications

• Minimum of 3 years of proven experience as a DevSecOps, DevOps, or Cloud Security Engineer
• In-depth knowledge of Linux operating systems (Ubuntu, CentOS, Debian) and fundamental network troubleshooting
• Hands-on experience in virtualization management (Proxmox VE) and Cloud Computing, specifically GCP (familiarity with GKE is a strong plus)
• Solid experience building and managing CI/CD pipelines (e.g., GitLab CI, GitHub Actions, Jenkins) and working with Containerization technologies (Docker, Kubernetes)
• Proficient with Infrastructure as Code (IaC) tools such as Terraform or Ansible
• Practical experience configuring Firewalls, SSH, and secure Tunneling/VPN architectures
• Experience in managing and configuring SIEM solutions, with mandatory hands-on experience using Wazuh for security posture analysis and threat monitoring
• Familiarity with monitoring and logging stacks (Prometheus, Grafana, or ELK Stack)
• Strong technical understanding of, or direct involvement in, ISO 27001 security implementations
• Proactive, able to work independently, and equipped with excellent problem-solving skills