Mid Cloud DevSecOps Engineer

About YellowIpe Our mission is to inspire the connection between technology and people; we foster the best in our professionals through our expertise in finding and attracting the best talent for the best projects. Focus on People, Collaboration, and Commitment are the pillars that guide us on this journey. Join the yellow team as our new Mid Cloud DevSecOps Engineer! Responsibilities: Design, implement, and continuously optimize security controls in AWS, Azure, and GCP cloud environments, ensuring compliance with best practices and current regulations.

Work in close collaboration with Security, DevOps, and Engineering teams, contributing to the strengthening of the organization's security posture by identifying and mitigating vulnerabilities.

Support development teams in security, functionality, and performance validation throughout the software delivery lifecycle, ensuring the integration of security testing from the early stages of development.

Automate security processes and integrate effective security controls into CI/CD pipelines, ensuring efficiency and effectiveness in deployments.

Guide and mentor junior team members, promoting the adoption of security best practices among engineering teams and encouraging a proactive security culture.

Requirements: 2 to 4 years of hands-on experience with cloud platforms (AWS, Azure, or GCP), with a proven track record of implementing secure solutions.

Solid knowledge in Identity and Access Management (IAM), Kubernetes security, and cloud network architecture, including segmentation principles and secure network configuration.

Experience in DevSecOps practices, Secure Development Lifecycle (SDLC), Infrastructure as Code (Terraform or similar), and security in CI/CD, with the ability to apply security standards throughout the development process.

Scripting and automation skills using Python, PowerShell, or similar languages to create and maintain scripts that streamline security processes.

Strong communication and problem-solving skills, with the ability to work collaboratively in dynamic and cross-functional environments.

Professional proficiency in English, with the ability to communicate technical concepts clearly and effectively.

Differentials: Experience with Cloud Security Posture Management (CSPM) tools such as Prisma Cloud, Wiz, BitSight, SecurityScorecard, or Black Duck, demonstrating the ability to continuously assess and improve cloud security.

Knowledge of Software Composition Analysis (SCA), Static Application Security Testing (SAST), and Dynamic Application Security Testing (DAST) tools, especially Snyk, to ensure application integrity and security.

Experience with containerization using Docker and orchestration with Kubernetes, contributing to the effective adoption of microservices architectures.

Familiarity with artificial intelligence tools for security automation, addressing emerging challenges with innovative solutions.

Experience with Crossplane, facilitating the abstraction and management of resources across multiple cloud platforms.

Application: View the job and apply at YellowIpe