DevSecops in Sydney

Overview

Job Description for DevSecops in Sydney.

Responsibilities

• Scope: Improve the automation of security controls
• Work closely with the consumer showback team on defining processes and system requirements
• Design and implement updates to the showback platform including Cloud Conformity WAF status Certificate Management
• Work with STO/account owners to uplift the security posture of consumer accounts using, at least: Show back platform Trusted advisor Risk management process
• Work with the Onboarding team to ensure that security standards and policies are being setup and configured correctly
• Work on some items from the Cloud Security LRP, implementing enterprise minimum security requirements
• Data Masking
• Encryption monitoring
• Perimeter protections
• Ingress / Egress uplift
• Integration of SailPoint for SSO Management

Qualifications

• 3+ years of extensive Python proficiency
• 3+ years of Java Experience
• Extensive exposure to: JavaScript, Jenkins, CodePipeline + CodeBuild
• AWS ecosystem including AWS Well-Architected Framework, Trusted Advisor, GuardDuty, SCP, SSM, IAM, WAF
• Deep understanding of automation, quality engineering, architectural methodologies, principles, and solution design
• Hands-on experience with Infrastructure-As-Code tools to automate deployments in AWS, preferably CloudFormation and CDK
• Familiarity with operational observability, including log aggregation, application performance monitoring, etc
• Experience deploying auto-scaling and load-balanced / Highly Available applications
• Familiar with CI/CD pipelines and tools such as CodeBuild, CodeDeploy, CodePipeline
• Hands-On experience in managing certificates (client-server, mutual TLS, etc)