DevSecOps Engineer

Role : DevSecOps Engineer

Location : Erie, PA (Day 1 Complete Onsite All 5 Days a Week)

Duration : Long Term

We are looking for a skilled and experienced Cloud Dev-SecOps Engineer with a strong background in Amazon Web Services (AWS) to join our team. This role will be pivotal in integrating security practices into our cloud-based infrastructure and operations, while also supporting production environments with a focus on reliability, scalability, and efficiency. The ideal candidate will have a deep understanding of DevOps principles, security best practices, and AWS services, along with the ability to manage and maintain mission-critical systems in a fast-paced environment.

Skills :

Bachelor’s in Computer Science, Engineering, or a related field (or equivalent work experience).

Minimum of 10 years of experience as a DevOps Engineer, Security Engineer, or similar role, with a focus on AWS.

Strong understanding of DevOps principles, CI/CD pipelines, and automation tools such as Jenkins, GitLab CI/CD, or AWS Code Pipeline.

Experience with security best practices, compliance standards (e.g., PCI DSS, HIPAA, GDPR), and security frameworks (e.g., NIST, CIS) in cloud environments.

Proficiency in scripting and programming languages such as Python, Bash, or PowerShell.

Hands-on experience with containerization technologies (Docker, Kubernetes), serverless computing (AWS Lambda), and microservices architectures.

Familiarity with monitoring and logging tools such as CloudWatch, CloudTrail, ELK stack, or Splunk.

Excellent problem-solving skills and the ability to troubleshoot complex issues in distributed systems.

Strong communication skills with the ability to collaborate effectively with cross-functional teams.

Responsibilities :

Collaborate with development and operations teams to integrate security practices into the software development lifecycle (SDLC) and continuous integration/continuous deployment (CI/CD) pipelines.

Implement and maintain security controls, monitoring, and compliance measures across all AWS environments, including VPCs, IAM, security groups, and encryption.

Automate security assessments, vulnerability scanning, and threat detection using tools such as AWS Config, GuardDuty, Inspector, and others.

Design, deploy, and maintain infrastructure as code (IaC) using tools like Terraform, CloudFormation, or AWS CDK to ensure consistent and repeatable deployments.

Implement and manage CI/CD pipelines using AWS CodePipeline, CodeBuild, and CodeDeploy to automate software builds, testing, and deployment.

Monitor, optimize, and troubleshoot production systems to ensure high availability, performance, and scalability.

Participate in incident response and root cause analysis to address security incidents and operational issues in a timely manner.

Provide technical support and guidance to development and operations teams on security best practices, performance optimization, and cost management.

Stay up-to-date with industry trends, emerging technologies, and AWS services to drive innovation and continuous improvement.