Mô tả Công việc
About the Role
We are seeking a DevOps & Security Engineer to build and maintain scalable, secure infrastructure for our CRM systems, client portals, and web applications. The ideal candidate will have a strong background in DevOps practices, with a focus on automation, infrastructure as code (IaC), and system security. This role is pivotal in ensuring seamless deployments, system reliability, and data protection for our FinTech solutions.
Key Responsibilities
DevOps Responsibilities:
1. Infrastructure Management:
o Design, deploy, and maintain scalable cloud-based infrastructure using AWS, Azure, or GCP.
o Automate provisioning and configuration using tools like Terraform, Ansible, or CloudFormation.
2. CI/CD Pipeline Development:
o Build and optimize CI/CD pipelines using Jenkins, GitHub Actions, or GitLab CI/CD.
o Automate deployments and manage containerized applications using Docker and Kubernetes.
3. Monitoring and Troubleshooting:
o Set up monitoring solutions using tools like Prometheus, Grafana, or Datadog to ensure system health and performance.
o Troubleshoot and resolve production issues to minimize downtime.
4. Collaboration:
o Work closely with
developers to streamline deployments and ensure efficient integration of code changes into production.
Security Responsibilities:
System Hardening and Security:
Implement and maintain secure server configurations, firewalls, and intrusion detection/prevention systems.
Conduct regular vulnerability assessments and penetration tests using tools like Nessus, Qualys, or Burp Suite.
Security in CI/CD:
Integrate security tools into CI/CD pipelines, such as Snyk, Aqua Security, or Trivy, to automate vulnerability detection.
Enforce security checks in code deployment processes.
Compliance and Data Protection:
Ensure infrastructure and workflows adhere to compliance standards such as GDPR, PCI DSS, or SOC 2.
Manage encryption for data in transit and at rest.
Incident Response:
Develop and maintain incident response plans for system breaches.
Monitor logs and security events using SIEM tools like Splunk or ELK Stack.
