DevOps Engineer

JenRecruitment

Cape Town, Western Cape
R60,000-65,000 per year
Permanent
Full-time

13 days ago

Our client is a digital innovation, development, and execution partner that designs, builds and launches products that create real business value through our customer-centric approach. They disrupt established markets and capture opportunities in exponential technology fields. They are a cross-functional team of techies and creatives with proven experience, and together they are a powerhouse of innovation, technology, strategy and design. They have developed structures and processes that support their business goals, but more importantly enable the teams to perform optimally.Their mission is not only to safeguard our own IT ecosystem but also to ensure our clients' digital realms remain unassailable. As our DevOps Engineer, you will be thrust into the heart of our containerized web and mobile application environment, predominantly hosted via Kubernetes in AWS. Your primary task will be to fortify our CI/CD pipelines, ensuring every line of code undergoes rigorous quality and security checks before seamlessly integrating into our systems. However, your role goes beyond just the execution of tasks. We're on the hunt for a visionary – someone ready to steer our teams towards a more robust and inclusive DevOps culture. This is where your technical leadership will shine.Effective communication is at the core of this position. Your prowess will lie in translating complex technical jargon into digestible insights for our stakeholders, thereby empowering them with the knowledge to make pivotal decisions. Your radar must always be attuned to the ever-evolving cyber threat landscape. Equipped with the latest in threat modeling, risk assessment strategies, and adept code reviews, you will present innovative solutions tailored to address specific challenges, ensuring we leverage the right technologies to tackle the right problems. In essence, you'll be pivotal in shaping the clients secure and
compliant future.Key responsibilities:

Integration of Security Tools & Practices: Implement and maintain security tools within the CI/CD pipeline ensuring timely detection and correction of vulnerabilities.
Automated Security Testing: Set up and manage tools that perform automated security testing of applications and infrastructure, such as SAST, DAST, IAST, and RASP.
Cloud Security: Ensure the secure configuration and deployment of cloud resources.
Provide expertise on cloud-native security solutions.
Container Security: Secure containerized applications throughout their lifecycle, from build to deployment.
Security Awareness & Training: Collaborate with development teams to enhance their security knowledge and integrate security practices into their workflows.
Incident Response: Collaborate with the security team on incident response plans and participate in incident handling when needed.
Security Metrics & Reporting: Monitor and report on security metrics, providing insights and recommendations.
Vulnerability Management: Work on patch management processes and engage in the timely resolution of identified vulnerabilities.
Continuous Improvement: Stay updated on new security technologies, threats, and best practices. Recommend and implement improvements to enhance security without compromising the velocity of development.
ISO27001 Stewardship: Oversee the adherence to ISO27001 standards within the realms of development and security. This role does not extend to operational oversight but ensures development and security practices are in line with the certification's standards.

Essential qualifications & skills:

Background & Experience: Originating from an open-source operating system background, candidates should possess a minimum of 5 years in IT, with 3 years focused on DevSecOps roles.
Cloud Expertise: Demonstrated experience working in cloud environments, with a deep understanding of cloud architectures, services, and best practices.
Penetration Testing & Security Analysis: Proficiency in conducting penetration tests and thorough security analyses to identify vulnerabilities and suggest remediation measures.
Programming Skills: Strong coding capabilities, with experience in languages such as Python, Go, Java, JavaScript, and TypeScript, to develop and integrate security solutions.
Certifications: Possessing industry-specific certifications, such as AWS DevOps or Security, will be considered an advantage.
Leadership & Communication: Prior experience leading teams complemented by excellent communication and leadership abilities.
Problem-Solving Abilities: Exceptional troubleshooting skills, with a knack for addressing complex technical issues.
Incident Response: Demonstrated ability in IT Incident Response and handling security breaches.
Networking: A foundational grasp of networking principles and experience with firewalls from brands like Fortigate, Palo Alto, and Mikrotik.
Process & Documentation: Process-driven mindset with the ability to produce clear documentation supporting development and security activities.

Technology Stack:

Container Orchestration: Docker and Kubernetes.
Cloud Platforms: Specifically AWS.
Infrastructure As Code: Tools such as Terraform and Ansible.
Kubernetes Package Manager: Experience with Helm Charts.
CI/CD Tooling: Familiarity with Gitlab, Jenkins, CircleCI, among others.
Penetration Testing Tools: Tools like Burp Suite, W3af, and Zed Attack Proxy.
Vulnerability Assessment: Hands-on experience with tools like Nessus and Metasploit.
System Monitoring: Tools including Datadog and New Relic.
Cloud Security Posture Management: Knowledge of solutions such as Datadog, Prisma Cloud, and Aquasec.
SIEM Tools: Familiarity with SIEM solutions like Datadog, Splunk, Log Analytics, Elastic, or Exabeam.

Ideal candidate:

Self-motivated and driven
Proactive
Accountability and Execution
Adaptability
Control and Efficiency
Information Monitoring
Initiating Action
Optimising Diversity
Ownership
Planning and Organising
Technical Knowledge
Team Orientation
5 years experience in a similar role
Passion for collaboration & mentorship

Yearly Bonus: The role includes a yearly bonus structure based on the company's performance for the financial year.Flexible Working Hours: Enjoy the flexibility of working hours to maintain a healthy work-life balance.Growth Opportunities: We offer growth opportunities within our dynamic organization.Online Learning: Access to online learning resources to support your professional development.Employee Assistance Program: A dedicated program to provide support and resources for personal and professional challenges.

JenRecruitment

Apply Now