Junior DevSecOps

Design, implement, and maintain CI/CD pipelines (e.g., GitLab CI, GitHub Actions) to automate build, test, and deployment processes Integrate security scanning tools (SAST, DAST, SCA) such as SonarQube, OWASP ZAP, and Snyk into pipelines Manage container security using Docker and Kubernetes (RBAC, Network Policies, Pod Security) Implement Infrastructure as Code (IaC) using Terraform or Ansible Deploy and maintain monitoring and alerting systems (Prometheus, Grafana, Kibana, Sentry) Manage server infrastructure across on-premise and cloud platforms (AWS, Google Cloud, DigitalOcean) Implement access control, secret management (e.g., HashiCorp Vault), and SSL/TLS certificate management Conduct vulnerability assessments and basic penetration testing Ensure compliance with ISMS (ISO 27001) and PDPA standards Develop and maintain Backup & Disaster Recovery Plans (BCP/DRP)

Qualifications:

1. Bachelor’s degree or higher in Computer Science, Information Technology, Computer Engineering, or related fields
2. Minimum 0-2 years of experience in DevOps, Infrastructure, or Cybersecurity
3. Hands-on experience with CI/CD pipelines and container platforms (Docker, Kubernetes)
4. Experience managing cloud or on-premise production environments