Senior AWS DevOps Engineer

Job Description

The DevSecOps AWS Engineer is a hands-on technical position responsible for operating a diverse set of cloud security controls and monitoring processes. This role will work directly with security architecture teams to improve security posture and automation capabilities:Continuously improve the security of our e-commerce productsComply with a range of security and regulatory requirements (internal and external)Respond to audit requests and requirementsManage cloud security tools such as WAF, IDS/IPS, Anti-Virus, Integrity monitoring, vulnerability scanning and cloud security/compliance monitoring frameworks.Operate and analyze network traffic flow, application, and infrastructure logs in order to identify suspicious activity or behavior anomalies.Assess infrastructure and application vulnerabilities, and take remediation actions as appropriate.Operate and manage AWS IAM permissions based on defined roles and responsibilities.Ensure tight security for an ecommerce platform including data encryption, security groups, environment scanning, etc.Partner with Experian Global Security office to ensure policies and standards are being properly applied.Based on a developer self-service model , our cloud-computing Platform as a Service product automates:AWS resource provisioning and management (based on immutable compute resources)Build pipeline supporting Continuous Delivery, SDLC Security tools, including support for canary and blue green releasesContainer based delivery (Docker) and serverless workflows (Lambda, Step-Functions).Micro-service support (service registry, service-to-service authentication, authorization and auditing)Event management and analysis via logging and event data pipelinesInstrumentation, monitoring, notification, and alertingData pipeline from transaction support (Dynamo) to BI (RedShift)The current Platform has been implemented primarily as infrastructure as code , so experience with Python, or equivalent experience with other scripting or infra-coding tools is essential. The Platform is being managed as a true software product (story backlog, product roadmap, developer involvement in product direction), so Agile Product Oriented Development experience is also important. Responsibilities: Collaborate with information security, DevOps and engineering teams to identify Platform needs and issues with respect to securityCollaborate with key third party security partners to ensure that security controls adhere to defined policies and mitigate risks.Daily operational security controls and monitoring.Author Agile stories, estimate story points, assist with sprint planning and retrospectivesPerform advanced security technical troubleshooting for cloud and e-commerce environmentsParticipate in incident response exercises and continue documenting security and incident response procedures.Qualifications Education and Experience: 3+ years experience in Information Security, and/or Ops or DevOps role, focused on automated solutions supporting securitySecurity certifications such as CISSP, CCSP, GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Incident Handler (GCIH) are a plusFluency in Python or other programming or scripting languagesProduction experience with public cloud (AWS, Google or Azure AWS strongly preferred)Experience with a variety of open source technologies and tools in support of cross-team collaborationBachelor of Science or comparable experience Qualifications Required: Knowledge of the InfoSec/DevOps tools chain focused on the AWS Linux platformExperience deploying automation solutions in a public cloud environment such as AWSKnowledge of PCI/HIPPA and other security related standards and requirementsExperience supporting security auditsOperationally savvy, experience with monitoring, alerting, and analyzing system metrics to identify problems and understanding system behavior specific to security concernsAbility to work in a fast paced, e-commerce environmentStrong communication and collaboration skillsStrong problem solving skillsA passion for security and innovationCollaboration, drive open communication and reach across functional borders,

Keyskills :
linuxjenkins gitmaven automationopen source cloud securitysecurity tools problem solvin