DevOps Engineer
Description
We are seeking a prominent and enthusiastic DevOps Engineer to join our dynamic team. The ideal candidate will have a strong background in cloud technologies, security practices, and DevOps methodologies. You will play a critical role in ensuring the security, scalability, and efficiency of our applications and infrastructure while following best practices in development and deployment.
Key Responsibilities:
- Cloud Infrastructure Management:
- Design, implement, and manage AWS services including CloudFront, Lambda@Edge, WAF, GuardDuty, Cognito, SES, SNS, ECS Fargate, RDS, Lambda, API Gateway, ALB, KMS, Amazon Q, S3, and Secrets Manager.
- Utilize AWS CloudTrail and CloudWatch for monitoring and logging to ensure system reliability and performance.
- Monitoring and Insights:
- Monitor AWS CloudWatch metrics, logs, and insights to track application performance and system health.
- Create and maintain CloudWatch dashboards to visualize key performance indicators (KPIs) and operational metrics.
- Set up CloudWatch Alarms to proactively notify the team of any anomalies or performance issues.
- Analyze CloudWatch Logs Insights to troubleshoot and resolve issues in real-time.
- Infrastructure as Code (IaC):
- Develop and maintain infrastructure using AWS CDK with TypeScript, adhering to best practices.
- Implement unit tests and utilize cdk-nag for architecture compliance.
- Manage AWS Organizations and implement best practices for multi-account setups and Service Control Policies (SCP).
- Containerization and Security:
- Create and optimize Docker images using multi-stage builds, ensuring security best practices are followed.
- Use Docker Compose for local application development and testing.
- Implement security measures for Docker images and containers, including scanning for vulnerabilities.
- Security Practices:
- Ensure encryption in transit and at rest for all data.
- Conduct Software Composition Analysis (SCA), Static Application Security Testing (SAST), and Dynamic Application Security Testing (DAST) using tools like Snyk, Hadolint, OWASP ZAP, and SonarCloud.
- Apply the principle of least privilege across all AWS resources and services.
- CI/CD Pipeline Management:
- Design and implement CI/CD pipelines using AWS CodePipeline and AWS CodeBuild for multi-account deployments.
- Collaborate with development teams to streamline deployment processes and improve overall efficiency.
- Continuous Improvement:
- Stay motivated to improve and optimize the use of various technologies, following best practices.
- Actively seek opportunities to learn and implement new tools and methodologies to enhance security and performance.