Senior DevSecOps Engineer

Careers at Paper.id; Jakarta Pusat; On-site; IDR 420,000,000 - 800,000,000; Full time

Job summary

Paper.id is seeking a Senior DevOps/DevSecOps Specialist who blends infrastructure automation, reliability, and CI/CD with hands-on cybersecurity. You will bridge DevOps and Security—embedding security controls across cloud architecture, automating threat detection, and securing software delivery pipelines.

Responsibilities include tuning and automating infrastructure, performing root-cause analysis, and maintaining runbooks.

Qualifications

• Bachelor’s degree in computer science, engineering, cybersecurity, or related field.
• Deep expertise in DevOps/DevSecOps with cloud security controls.
• Proficient in scripting languages and automation.
• Solid understanding of authentication/authorization (OAuth, SAML, IAM) and OWASP Top 10.
• Experience with CI/CD pipelines and IaC.
• Knowledge of network security, encryption, and monitoring tools.

Responsibilities

• Tune/configure servers, clusters, and containers for high availability and scalability.
• Build automation to reduce errors and improve reliability.
• Perform root-cause analysis for production incidents.
• Design/maintain procedures for monitoring and automated visualization.
• Maintain architecture docs and runbooks.
• Embed security into CI/CD pipelines and automate vulnerability scanning.
• Conduct security testing and code reviews to improve security posture.
• Hardening of cloud/infrastructure and incident response planning.

Skills

Ruby

Python

Go

.NET

Bash scripting

CI/CD

Security mindset

Threat modeling

Education

Bachelor’s Degree in Computer Science/Engineering/Cybersecurity

Tools

Docker

Kubernetes

GitLab CI

GitHub Actions

Jenkins

Terraform

Ansible

SAST/DAST tools

Job description

Role Overview

We are looking for a Senior DevOps/DevSecOps Specialist who not only brings deep expertise in infrastructure automation, reliability, and CI/CD, but also possesses strong hands‑on experience in Cybersecurity. In this role, you will bridge the gap between DevOps and Security—implementing robust security controls across our cloud architecture, automating threat detection, securing software delivery pipelines, and ensuring our infrastructure is resilient against cyber threats.

What will you do:

DevOps & Infrastructure Engineering

• Tune and configure servers, clusters, and containers appropriately to ensure high availability, performance, and scalability.

• Build tools and automation to reduce occurrences of errors, optimize system reliability, and improve customer experience.

• Perform root cause analysis (RCA) for production errors, investigate incidents, and resolve complex technical issues.

• Design, implement, and maintain procedures for system troubleshooting, monitoring, and automated visualization.

• Maintain comprehensive technical documentation for system architecture, operational procedures, and emergency response plans.

Cybersecurity & Infrastructure Hardening

• DevSecOps Integration: Embed security tools, static/dynamic code analysis (SAST/DAST), and automated vulnerability scanning directly into CI/CD pipelines.

• Security Testing & Code Reviews: Perform ongoing security testing, penetration testing, and code reviews to identify and improve software security posturing.

• System & Cloud Hardening: Implement, test, and operate advanced security techniques, access controls, network segmentation, and encryption strategies in compliance with a technical reference architecture.

• Incident Response & Threat Mitigation: Provide engineering designs for new software solutions to help mitigate security vulnerabilities and act as a key responder to security incidents.

• Governance & Advisory: Consult team members on secure coding practices, zero‑trust architecture, and stay updated with the latest tools, security frameworks, and threat vectors.

What are we looking for:

• Education & Experience: Bachelor’s Degree in Computer Science, Computer Engineering, Cybersecurity, or a relevant field. Proven experience as a Senior DevOps, Infrastructure Engineer, DevSecOps Engineer, or Security Engineer.

• Security & Cryptography Expertise: Detailed technical knowledge of standards, frameworks, and capabilities for authentication and authorization (OAuth, SAML, IAM), applied cryptography, threat modeling, security vulnerabilities, and remediation (OWASP Top 10).

• Scripting & Development: Strong proficiency in Ruby, Python, Go, or .NET, alongside advanced Bash scripting for automation and security orchestration.

• Database & Systems: Working knowledge of databases and SQL, especially production‑level tuning, access security, and data encryption at rest/in transit.

• Containerization & CI/CD: Hands‑on mastery of Docker, Kubernetes, CI/CD pipelines (e.g., GitLab CI, GitHub Actions, Jenkins), Infrastructure as Code (Terraform/Ansible), and cloud‑native security tools.

• Network & Web Protocols: Adequate knowledge of web‑related technologies (Web Applications, Web Services, SOA), network/web protocols (TLS/SSL, WAF, VPNs), and Load Balancing / Async Queue setups.

• Security & Observability Tools: Proficiency in monitoring/APM tools (e.g., Datadog, Prometheus, Grafana, ELK) combined with SIEM, vulnerability scanners (e.g., SonarQube, Trivy, Snyk), and log auditing tools.

• Mindset: Strong passion for security research, continuous learning, and driving a proactive security culture across engineering teams.