Aws Cloud Devsecops Engineer

Job Description
Responsibilities:
Collaborate with development and operations teams to integrate security practices into the software development lifecycle (SDLC) and continuous integration/continuous deployment (CI/CD) pipelines.
Implement and maintain security controls, monitoring, and compliance measures across all AWS environments, including VPCs, IAM, security groups, and encryption.
Automate security assessments, vulnerability scanning, and threat detection using tools such as AWS Config, Guard Duty, Inspector, and others.
Design, deploy, and maintain infrastructure as code (IaC) using tools like Terraform, CloudFormation, or AWS CDK to ensure consistent and repeatable deployments.
Implement and manage CI/CD pipelines using AWS CodePipeline, Code Build, and Code Deploy to automate software builds, testing, and deployment.
Monitor, optimize, and troubleshoot production systems to ensure high availability, performance, and scalability.
Participate in incident response and root cause analysis to address security incidents and operational issues promptly.
Provide technical support and guidance to development and operations teams on security best practices, performance optimization, and cost management.
Stay up-to-date with industry trends, emerging technologies, and AWS services to drive innovation and continuous improvement.
Qualifications:
Bachelor’s degree in Computer Science, Engineering, or a related field (or equivalent work experience).
Minimum of 10 years of experience as a DevOps Engineer, Security Engineer, or similar role, with a focus on AWS.
Strong understanding of DevOps principles, CI/CD pipelines, and automation tools such as Jenkins, GitLab CI/CD, or AWS CodePipeline.
Experience with security best practices, compliance standards (e.G., PCI DSS, HIPAA, GDPR), and security frameworks (e.G., NIST, CIS) in cloud environments.
Proficiency in scripting and programming languages such as Python, Bash, or PowerShell.
Hands-on experience with containerization technologies (Docker, Kubernetes), serverless computing (AWS Lambda), and microservices architectures.
Familiarity with monitoring and logging tools such as CloudWatch, CloudTrail, ELK stack, or Splunk.
Excellent problem-solving skills and the ability to troubleshoot complex issues in distributed systems.
Effective communication skills with the ability to collaborate effectively with cross-functional teams.