Senior DevSecOps Engineer

Careers at Paper.id; Jakarta Pusat; Sur place; IDR 450 000 000 - 750 000 000; Plein temps

Résumé du poste

Paper.id is seeking aSenior DevOps/DevSecOps Specialist who blends infrastructure automation, reliability, and CI/CD with hands-on cybersecurity. You will bridge DevOps and Security, implementing robust controls across cloud architecture and automating threat detection to secure software delivery pipelines.

You will drive security testing, code reviews, and security hardening while collaborating with engineering teams to maintain resilient, scalable systems and a proactive security posture

Qualifications

• Bachelor’s degree or higher in CS, CE, cybersecurity or related field.
• Strong background in DevOps, Infra, DevSecOps, or security engineering.
• Deep knowledge of authentication/authorization (OAuth, SAML, IAM) and applied cryptography.
• Proficient in scripting and development (Ruby, Python, Go, or .NET) and Bash for automation.
• Hands-on experience with Docker, Kubernetes, CI/CD pipelines (GitLab/GitHub/Jenkins), IaC (Terraform/Ansible).
• Experience with security testing, threat modeling, and secure coding practices.
• Familiarity with monitoring/observability tools and SIEM for security insights.

Responsabilités

• Tune and configure servers, clusters, and containers for high availability and scalability.
• Build automation to reduce errors and improve reliability.
• Perform RCA for production issues and resolve complex incidents.
• Maintain procedures for troubleshooting, monitoring, and automated visualization.
• Document system architecture and emergency response plans.
• Embed security tools and vulnerability scanning into CI/CD pipelines.
• Conduct security testing, code reviews, and threat mitigation measures.
• Implement and test system hardening, access controls, and encryption strategies.
• Advise on secure coding, zero-trust architecture, and best security practices.

Connaissances

Ruby, Python, Go

Bash scripting

OAuth, SAML, IAM

Threat modeling

OWASP Top 10

Continuous learning

Security mindset

Formation

Bachelor’s Degree in Computer Science / Cybersecurity

Outils

Docker

Kubernetes

GitLab CI

GitHub Actions

Jenkins

Terraform

Ansible

SAST/DAST tools

Datadog/Prometheus/Grafana/ELK

Snyk/Trivy/SonarQube

Description du poste

Role Overview

We are looking for a Senior DevOps/DevSecOps Specialist who not only brings deep expertise in infrastructure automation, reliability, and CI/CD, but also possesses strong hands‑on experience in Cybersecurity. In this role, you will bridge the gap between DevOps and Security—implementing robust security controls across our cloud architecture, automating threat detection, securing software delivery pipelines, and ensuring our infrastructure is resilient against cyber threats.

What will you do:

DevOps & Infrastructure Engineering

• Tune and configure servers, clusters, and containers appropriately to ensure high availability, performance, and scalability.
• Build tools and automation to reduce occurrences of errors, optimize system reliability, and improve customer experience.
• Perform root cause analysis (RCA) for production errors, investigate incidents, and resolve complex technical issues.
• Design, implement, and maintain procedures for system troubleshooting, monitoring, and automated visualization.
• Maintain comprehensive technical documentation for system architecture, operational procedures, and emergency response plans.

Cybersecurity & Infrastructure Hardening

• DevSecOps Integration: Embed security tools, static/dynamic code analysis (SAST/DAST), and automated vulnerability scanning directly into CI/CD pipelines.
• Security Testing & Code Reviews: Perform ongoing security testing, penetration testing, and code reviews to identify and improve software security posturing.
• System & Cloud Hardening: Implement, test, and operate advanced security techniques, access controls, network segmentation, and encryption strategies in compliance with a technical reference architecture.
• Incident Response & Threat Mitigation: Provide engineering designs for new software solutions to help mitigate security vulnerabilities and act as a key responder to security incidents.
• Governance & Advisory: Consult team members on secure coding practices, zero-trust architecture, and stay updated with the latest tools, security frameworks, and threat vectors.

What are we looking for:

• Education & Experience: Bachelor’s Degree in Computer Science, Computer Engineering, Cybersecurity, or a relevant field. Proven experience as a Senior DevOps, Infrastructure Engineer, DevSecOps Engineer, or Security Engineer.
• Security & Cryptography Expertise: Detailed technical knowledge of standards, frameworks, and capabilities for authentication and authorization (OAuth, SAML, IAM), applied cryptography, threat modeling, security vulnerabilities, and remediation (OWASP Top 10).
• Scripting & Development: Strong proficiency in Ruby, Python, Go, or .NET, alongside advanced Bash scripting for automation and security orchestration.
• Database & Systems: Working knowledge of databases and SQL, especially production-level tuning, access security, and data encryption at rest/in transit.
• Containerization & CI/CD: Hands‑on mastery of Docker, Kubernetes, CI/CD pipelines (e.g., GitLab CI, GitHub Actions, Jenkins), Infrastructure as Code (Terraform/Ansible), and cloud‑native security tools.
• Network & Web Protocols: Adequate knowledge of web‑related technologies (Web Applications, Web Services, SOA), network/web protocols (TLS/SSL, WAF, VPNs), and Load Balancing / Async Queue setups.
• Security & Observability Tools: Proficiency in monitoring/APM tools (e.g., Datadog, Prometheus, Grafana, ELK) combined with SIEM, vulnerability scanners (e.g., SonarQube, Trivy, Snyk), and log auditing tools.
• Mindset: Strong passion for security research, continuous learning, and driving a proactive security culture across engineering teams.