Cloud DevOps Engineer - Security at Boxy Charm (Toronto, ON, Canada)

Summary

The role of the Cloud DevOps Engineer - Security is to implement and manage cloud applications, systems and services and security to ensure high levels of availability, safety and security according to PCI Compliance.  The DevOps Engineer is responsible for managing and building the automation tools of development such as continuous deployment, continuous integration, security testing of code, and automation of infrastructure and write PCI documentation SOPs and build monitoring tools. In this role, you will work collaboratively with software engineering to deploy and operate our systems. Help automate and streamline our operations and processes. Be responsible for development, test, pre-production and production environments.

Duties and Responsibilities 

• 
  
• Participate in system design and planning sessions for the development and maintenance of production cloud services.  
• 
  
• Coordinate with other DevOps team members to ensure projects and activities are completed on time and with minimal impact to the business.  
• 
  
• Coordinate with the Service Desk to ensure front line support needs for production services are communicated and operationalized.  
• 
  
• Perform automated tests for performance and functionality. Be able to work on automating QA processes.
• 
  
• Participate in incident and problem resolution as it relates to production infrastructure and ensure all activities are logged in the Jira Service Desk management tool.  
• 
  
• Perform monitoring activities to ensure all systems and services are meeting service level agreements.  
• 
  
• Practice asset management procedures to ensure all cloud infrastructure is inventoried accurately.
• 
  
• Review and recommend upgrade, maintenance and patching activities for production systems and services.
• 
  
• Conduct research on emerging technologies, products and services.  
• 
  
• Maintain documentation of DevOps SOPs and cloud services.
• 
  
• Be on-call off-hours to provide support for operational tasks
• 
  
• Other duties as assigned.
• 
  

Job Requirements (Education/Experience/Knowledge) 

• 
  
• Proficient in security systems, executing extensive pentests with various tools, VPN and SSO technologies, Qualys security scanner, Threat Management, IPS, IDS, code release automated security testing, tools for security alerts, Linux security hardening experience.
• 
  
• Experience with AWS services as EC2, RDS, MySQL, Aurora, ElastiCache, Load Balancers, Lambda, Storage, S3, EBS, Storage Gateway,Database, Networking, VPC (all foundational elements such as ACLs, Security Groups, Route Tables, Internet & Virtual Private Gateways, etc.), ALB/NLB load balancers, WorkSpaces, Security, IAM, GuardDuty.
• 
  
• Extensive Experience in a Linux and MS Windows operating systems, configuration, installation, tuning, maintenance and monitoring.
• 
  
• Extensive knowledge of web server technologies as Apache, Nginx, Proxy Varnish, Redis.
• 
  
• Experience with scripting (Python, Perl, Bash, PowerShell)
• 
  
• Extensive experience with automation systems: Ansible, Jenkins, Terraforms, CloudFormation, Puppet, AWS management tools - AWS Config, Cloudtrail, Cloudwatch, Systems Manager, Trusted Advisor.
• 
  
• Good understanding of cloud services as PagerDuty, Cloudflare, SnowFlake, Pingdom, NewRelic, AWS Cloudwatch, Sumologic or Splunk, ELK.
• 
  
• Knowledge of current and emerging cloud and IaaS security trends. IaaS security and architecture concepts, including network segmentation, perimeter security, event monitoring; remediation methods to bring cloud infrastructures into compliance for security compliance; the risks that exist when measures are not taken to provide for contingency planning and business continuity.
• 
  
• Good understanding of source code management and version control systems like Git, CVS, and integration to automation systems.
• 
  
• Proficient and strong written and spoken English, communication and presentation skills.
• 
  
• Ability to view and reconcile issues from multiple dimensions including: technical, business, short-term and long-term
• 
  
• Time management skills, ability to meet deadlines
• 
  
• Ability to function in a fast-paced, flexible environment
• 
  
• Ability to not only adapt to change, but often be a force for positive change
• 
  
• Post-Secondary Education in Computer Engineering or a related field.
• 
  
• CISSP, Linux, AWS, A+, Network+, MCP, MCSE, MCITP, or similar certification preferred.
• 
  

by via developer jobs - Stack Overflow