DevSecOps Professional

Shashwath Solution; Dadri; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

Shashwath Solution in India seeks a DevSecOps/SRE professional to automate system operations, implement IaC with Terraform for AWS, and manage Kubernetes environments using Helm and kubectl.

The role emphasizes security, observability with OpenTelemetry, policy enforcement with OPA, and network security using Aviatrix. You’ll integrate container vulnerability scanning into CI/CD pipelines and collaborate with DevOps teams to harden platforms.

Qualifications

• Proficient in shell scripting and automation.
• Strong command of Terraform, AWS, Kubernetes, Helm, kustomize, and kubectl.
• Deep understanding of AWS security practices, VPC configurations, and Aviatrix.
• Familiarity with OpenTelemetry for observability and OPA for policy enforcement.
• Experience in packet tracing for network analysis.
• Practical application of OWASP tools and web application security.
• Integration of container vulnerability scanning tools within CI/CD pipelines.
• Proven ability to define security requirements for source code repositories, binary repositories, and secrets managers in CI/CD pipelines.
• Collaboration expertise with DevOps teams for security integration.
• Regular monitoring and reporting capabilities.
• Site Reliability Engineering experience.
• Hands-on proficiency with source code management tools, especially Git.

Responsibilities

• Execute shell scripts for seamless automation and system management.
• Implement infrastructure as code using Terraform for AWS, Kubernetes, Helm, kustomize, and kubectl.
• Oversee AWS security groups, VPC configurations, and Aviatrix for network orchestration.
• Contribute to Opentelemetry Collector for observability.
• Implement microsegmentation using AWS native resources and Aviatrix for routes.
• Enforce policies through Open Policy Agent (OPA) integration.
• Develop and maintain runbooks for standard operating procedures.
• Utilize packet tracing for network analysis and security optimization.
• Apply OWASP tools and practices for robust web application security.
• Integrate container vulnerability scanning tools within CI/CD pipelines.
• Define security requirements for source code repos, binary repos, and secrets managers in CI/CD pipelines.
• Collaborate with software and platform engineers to infuse security principles into DevOps teams.
• Regularly monitor and report project status to management.

Skills

Shell scripting

Terraform

AWS

Kubernetes

Helm

Kustomize

Kubectl

Aviatrix

OpenTelemetry

OWASP

Git

SRE

Tools

Terraform CLI

Kubectl CLI

Helm

Kustomize

Aviatrix

OpenTelemetry Collector

OPA

OWASP Tools

Git

Job description

Responsibilities:

• Execute shell scripts for seamless automation and system management.
• Implement infrastructure as code using Terraform for AWS, Kubernetes, Helm, kustomize, and kubectl.
• Oversee AWS security groups, VPC configurations, and utilize Aviatrix for efficient network orchestration.
• Contribute to Opentelemetry Collector for enhanced observability.
• Implement microsegmentation using AWS native resources and Aviatrix for commercial routes.
• Enforce policies through Open Policy Agent (OPA) integration.
• Develop and maintain comprehensive runbooks for standard operating procedures.
• Utilize packet tracing for network analysis and security optimization.
• Apply OWASP tools and practices for robust web application security.
• Integrate container vulnerability scanning tools seamlessly within CI/CD pipelines.
• Define security requirements for source code repositories, binary repositories, and secrets managers in CI/CD pipelines.
• Collaborate with software and platform engineers to infuse security principles into DevOps teams.
• Regularly monitor and report project status to the management team.

Qualifications:

• Proficient in shell scripting and automation.
• Strong command of Terraform, AWS, Kubernetes, Helm, kustomize, and kubectl.
• Deep understanding of AWS security practices, VPC configurations, and Aviatrix.
• Familiarity with Opentelemetry for observability and OPA for policy enforcement.
• Experience in packet tracing for network analysis.
• Practical application of OWASP tools and web application security.
• Integration of container vulnerability scanning tools within CI/CD pipelines.
• Proven ability to define security requirements for source code repositories, binary repositories, and secrets managers in CI/CD pipelines.
• Collaboration expertise with DevOps teams for security integration.
• Regular monitoring and reporting capabilities.
• Site Reliability Engineering experience.
• Hands-on proficiency with source code management tools, especially Git.