Senior DevSecOps Engineer: Secure CI/CD & Cloud Infra

Careers at Paper.id; Jakarta Pusat; On-site; IDR 420,000,000 - 800,000,000; Full time

Job summary

Paper.id is seeking a Senior DevOps/DevSecOps Specialist who blends infrastructure automation, reliability, and CI/CD with hands-on cybersecurity. You will bridge DevOps and Security—embedding security controls across cloud architecture, automating threat detection, and securing software delivery pipelines.

Responsibilities include tuning and automating infrastructure, performing root-cause analysis, and maintaining runbooks.

Qualifications

• Bachelor’s degree in computer science, engineering, cybersecurity, or related field.
• Deep expertise in DevOps/DevSecOps with cloud security controls.
• Proficient in scripting languages and automation.
• Solid understanding of authentication/authorization (OAuth, SAML, IAM) and OWASP Top 10.
• Experience with CI/CD pipelines and IaC.
• Knowledge of network security, encryption, and monitoring tools.

Responsibilities

• Tune/configure servers, clusters, and containers for high availability and scalability.
• Build automation to reduce errors and improve reliability.
• Perform root-cause analysis for production incidents.
• Design/maintain procedures for monitoring and automated visualization.
• Maintain architecture docs and runbooks.
• Embed security into CI/CD pipelines and automate vulnerability scanning.
• Conduct security testing and code reviews to improve security posture.
• Hardening of cloud/infrastructure and incident response planning.

Skills

Ruby

Python

Go

.NET

Bash scripting

CI/CD

Security mindset

Threat modeling

Education

Bachelor’s Degree in Computer Science/Engineering/Cybersecurity

Tools

Docker

Kubernetes

GitLab CI

GitHub Actions

Jenkins

Terraform

Ansible

SAST/DAST tools

Job description

Paper.id is seeking a Senior DevOps/DevSecOps Specialist who blends infrastructure automation, reliability, and CI/CD with hands-on cybersecurity. You will bridge DevOps and Security—embedding security controls across cloud architecture, automating threat detection, and securing software delivery pipelines.

Responsibilities include tuning and automating infrastructure, performing root-cause analysis, and maintaining runbooks.