DevOps Engineer II

Roles and responsibilities:

• Implement security controls for cloud (AWS & Azure) systems

• Thoroughly document implementations, via technical documentation and run-books

• Configure and manage security and compliance solutions using cloud-native security solutions & services.

• Build, deploy, and manage production security tools and services to monitor networks, endpoints, and cloud workloads

• Create and execute patch management plans for Windows, Linux, and applications. Identify, test, and deploy security patches promptly to mitigate vulnerabilities and ensure compliance.

• Develop and deploy backup strategies using AWS and Azure Backup to ensure data protection, compliance, and integration into the disaster recovery (DR) strategy.

• Monitor backup jobs, troubleshoot issues, and optimize performance for AWS and Azure. Review and update backup policies, schedules, and retention settings to ensure data integrity.

• Organize and execute disaster recovery drills and tests. Collaborate with IT, business units, and partners to ensure all stakeholders are prepared for swift action during incidents.

• Develop and maintain reusable code libraries for patch management automation. Ensure libraries are well-documented and accessible, and promote consistency and efficiency.

• Design and implement automated patching strategies for Kubernetes, ECS, EKS, AKS, and Elastic Beanstalk using tools like Kured and AWS CodeDeploy. 

• Partner closely with security leadership, compliance, engineering, and IT Teams to execute security strategies for our cloud objectives

• Assist in responses to external audits and vulnerability assessments for various teams

• Document and maintain standard operating procedures (SOP)

• Support Cloud security operations including security alerts, incidents, change control and reporting, aligning to SOC activities.

Candidate requirement:

• 3+ years experience in cloud security, ideally AWS and Azure

• Engineering mindset with a relevant cloud and security background & understanding

• Should have worked on AWS and Azure (hands-on experience)

• Knowledge of serverless architectures and containerization (e.g., AWS Lambda, Amazon ECS/EKS).

• Good knowledge in Python, Shell and Powershell or any other scripting languages

• Experience with Infrastructure as Code (IaC) tools such as AWS CloudFormation or Terraform.

• Familiarity with networking, security, and storage solutions on AWS and Azure