Senior DevSecOps Engineer

Certa; Hinoba-an; On-site; PHP 1,786,000 - 2,678,000; Full time

Job summary

Certa is hiring a Senior DevSecOps Engineer - I to strengthen AWS production infrastructure and embed security-first engineering across our product ecosystem. This hands-on role requires securing, automating, stabilizing, and scaling workloads across EKS, ECS, EC2, and serverless environments.

You will bridge Engineering, Security, and Operations to ensure high availability, compliance, resilience, and secure CI/CD deployments, mentoring engineers in DevSecOps practices and driving reliable,

Qualifications

• 6–8 years in Cloud / DevOps / DevSecOps roles.
• Strong AWS production experience (EKS, ECS, EC2, S3, CloudFront, API Gateway, IAM, WAF, VPC).
• Kubernetes and Docker expertise.
• IaC experience with Terraform or CloudFormation.
• Scripting: Python, Bash, YAML, JSON.

Responsibilities

• Manage and optimize AWS production workloads (EKS, ECS, EC2, Lambda).
• Configure and secure networking (VPC, subnets, route tables, NAT, ALB/NLB, AWS WAF).
• Lead incident response, production troubleshooting, RCA and uptime adherence.
• Design and maintain secure CI/CD pipelines (Jenkins, GitHub Actions, GitLab CI, CodePipeline).
• Automate infrastructure provisioning using Terraform / CloudFormation.
• Embed Zero Trust and security-by-design across AWS architecture.
• Observability: CloudWatch, Prometheus, Grafana, ELK.

Skills

Cloud / DevSecOps experience

AWS production experience

Kubernetes & Docker

CI/CD tooling

Scripting (Python/Bash)

Tools

Jenkins

GitHub Actions

GitLab CI

CodePipeline

Job description

About the Role

Certa is hiring a Senior DevSecOps Engineer - I to strengthen Certa's AWS production infrastructure and embed security-first engineering practices across our product ecosystem. This role is hands-on and operationally critical, responsible for securing, automating, stabilizing, and scaling AWS workloads across EKS, ECS, EC2, and serverless environments. The position bridges Engineering, Security, and Operations to ensure high availability, compliance, resilience, and secure CI/CD deployments.

What You Will Do

• AWS Infrastructure & Operations
• Manage and optimize AWS production workloads (EKS, ECS, EC2, Lambda).
• Administer AWS services including S3, ECR, CloudFront, API Gateway, SNS, SES, IAM, Secrets Manager, and CloudWatch.
• Configure and secure networking components (VPC, subnets, route tables, NAT, ALB/NLB, AWS WAF).
• Lead incident response, production troubleshooting, and root cause analysis (RCA).
• Ensure uptime, SLA adherence, and performance optimization.
• CI/CD & Automation
• Design and maintain secure CI/CD pipelines (Jenkins, GitHub Actions, GitLab CI, AWS CodePipeline).
• Integrate SAST, DAST, SCA, container scanning, and IaC scanning within pipelines.
• Automate infrastructure provisioning using Terraform / CloudFormation.
• Implement secure release governance and policy-as-code guardrails.
• DevSecOps & Security Engineering
• Enforce least-privilege IAM and secure key management practices.
• Embed Zero Trust and defense-in-depth principles across AWS architecture.
• Drive vulnerability management and compliance monitoring.
• Promote a Security-by-Design and SRE-driven reliability culture.
• Observability & Reliability
• Implement monitoring and alerting using CloudWatch, Prometheus, Grafana, and ELK.
• Improve system observability and proactive anomaly detection.
• Support debugging across infrastructure, networking, and application layers.
• Cross-Functional Enablement
• Collaborate with Development and QA to improve deployment velocity and reliability.
• Document architecture standards and operational runbooks.
• Mentor engineers on DevSecOps best practices.

What You Will Need

• 6-8 years of experience in Cloud / DevOps / DevSecOps roles.
• Strong AWS production experience (EKS, ECS, EC2, S3, CloudFront, API Gateway, IAM, WAF, VPC).
• Strong Kubernetes and Docker expertise.
• Experience with CI/CD tools (Jenkins, GitHub Actions, GitLab CI, CodePipeline).
• Hands-on Infrastructure-as-Code experience (Terraform / CloudFormation).
• Strong networking fundamentals (VPC design, routing, DNS, TLS, load balancing).
• Experience integrating security scanning and compliance controls.
• Scripting skills (Helm, Terraform Groovy, Bash, Python, YAML, JSON).
• Strong troubleshooting and analytical skills.