[5563] DevSecOps Engineer

Start date: Negotiable Clearance: NATO Secret or equivalent Location: 100% off-site Requirements: • In-depth knowledge of Microsoft Azure Cloud IaaS/PaaS Services • Proficiency in designing, deploying and managing landing zones in Microsoft Azure by leveraging IaC and CI/CD pipelines • Expertise in managing governance controls such as Azure Policy • Experience in building, deploying and maintaining containerized workloads using Azure Kubernetes Services (AKS) • Experience in managing deploying and monitoring Azure Virtual Machines (VMs) • Expertise in enabling secure and reliable access to applications for end-users • Strong analytical skills to assess and improve DevSecOps processes and workflows • Ability to troubleshoot complex Microsoft Azure Services issues and implement effective solutions • Understanding of security best practices and compliance requirements related to Microsoft Azure services and DevSecOps practices • Experience conducting audits and ensuring adherence to regulatory standards • Ability to document processes clearly and provide training on Microsoft Azure Services and DevSecOps practices Duties: • Deploy and manage landing zones by utilizing DevSecOps practices to ensure a secure, scalable foundation for cloud workloads • Deploy and manage cloud workloads on top of the landing zones in an automated fashion • Utilize Infrastructure as Code and CI/CD pipelines through Azure Devops • Build, deploy and maintain containerized workloads using Azure Kubernetes Services (AKS) • Deploy and monitor Azure Virtual Machines (VMs), including sizing, patching, backup, performance tuning and cost optimization • Build and maintain automated disaster recovery and backup solutions using services like Azure Backup, Site Recovery and storage replication • Monitor the performance and effectiveness of landing zones and cloud workloads • Identify opportunities for improvement and implement optimizations to enhance security and efficiency • Manage secure and reliable access to applications for end-users including configuration of Azure Application Gateways, Azure load-balancers and custom domains • Monitor Application availability, performance and security using services such as Azure Monitor, Log Analytics, Application insights and configure automated alerts • Provide support for Microsoft Azure Services • Related issues, including troubleshooting access, networking and cloud resource specific issues • Implement and manage governance controls such as Azure policies to ensure compliance with organizational standards • Ensure all deployed workloads and services adhere to Zero trust security principles, including proper network segmentation, identity-base access control and logging • Conduct regular audits and reviews of access controls and permissions • Collaborate with IT security, compliance, and other relevant teams to ensure cohesive cloud resources management strategies • Contribute to the lifecycle of cloud secure products in collaboration with the CTO CCOE to ensure reusable, secure and automated infrastructure modules • Communicate effectively with stakeholders to understand IaaS and Paas requirements and address concerns • Identify opportunities to enhance efficiency through automation and proactively implement solutions • Champion continuous improvement by evaluating new Azure capabilities, DevOps tools and security practices and integrate them into operations Login and apply | Register and apply |