Deskripsi Pekerjaan
We are seeking two highly skilled DevSecOps Engineers to join our growing team at Ridik. In this pivotal role, you will be responsible for bridging the gap between development and operations, ensuring our software delivery pipelines are not only efficient but also secure. As a DevSecOps Engineer, you will play a critical part in implementing infrastructure automation, securing cloud environments, and fostering a culture of security within the development lifecycle.
Our ideal candidates are passionate about automation and have a deep understanding of modern cloud architectures. You will collaborate closely with software developers and security experts to integrate security practices directly into the CI/CD pipeline. This is a fantastic opportunity to work in a dynamic environment where your expertise will directly impact the reliability and security of our enterprise solutions.
Tanggung Jawab
- Design, implement, and maintain robust CI/CD pipelines using tools like Jenkins, GitLab CI, or GitHub Actions.
- Conduct regular security audits, vulnerability assessments, and penetration testing on infrastructure and applications.
- Manage and automate cloud infrastructure using Infrastructure as Code (IaC) tools such as Terraform and AWS CloudFormation.
- Containerize applications and orchestrate them using Docker and Kubernetes for scalable deployment.
- Monitor system performance and security alerts in real-time using tools like Prometheus, Grafana, and Splunk.
- Implement and enforce security best practices, policies, and compliance standards across the organization.
- Collaborate with development teams to integrate security testing into the software development lifecycle (SDLC).
Kualifikasi
- Bachelor’s degree in Computer Science, Information Technology, or a related technical field.
- 3+ years of experience in DevOps, SRE, or DevSecOps engineering roles.
- Strong proficiency in scripting languages such as Python, Bash, or Go.
- Extensive experience with Linux/Unix administration and Windows Server management.
- Hands-on experience with cloud platforms, preferably AWS or Microsoft Azure.
- Knowledge of Identity and Access Management (IAM) and encryption standards.
- Security certifications such as CISSP, Security+, or AWS Security Specialty are highly desirable.