DevSecOps Specialist

Introduction

Working in IBM Cloud gives you the platform to learn, develop and utilize your skills everyday by working on the latest cloud related technology products and services. You'll be working in an environment where we understand how we can thrive best when we play to our strengths. That's why developing our people is key to our success, the door is always open for those ready to advance their career. Curiosity and courageous thinking are both vital when working in IBM Cloud, as we continue our dedication in guaranteeing that we are at the forefront of cloud technology. Our renowned legacy means we are leading the way in everything from analytics and security through to unmatched hardware & software designs. We provide our clients with the full end-to-end transformation as we build IBM's next generation cloud platform which is focused around delivering performance and predictability at a global scale. IBM's product and technology landscape includes Research, Software, and Infrastructure. Entering this domain positions you at the heart of IBM, where growth and innovation thrive.

Your role and responsibilities

• As a DevSecOps engineer, work on setting up service infrastructure and ensuring their availability, reliability, security and compliance.
• Manage the full lifecycle of code changes from development to deployment, including code review, testing and operations.
• Use of various open-source tools for instrumenting, monitoring, alerting, and debugging of production services.
• Participate in on-call rotations along with the other members of the team to maintain the uptime of our services out of hours.
• Participate in architectural discussions and help drive the future of our services as we continually strive to provide best-in-class experiences for IBM development teams.
• Stay abreast of the latest technologies and methodologies with high focus on Cloud infrastructure (VPC, Kubernetes/OpenShift, Istio, Akamai, Gateways etc)
• Provide exceptional end-user support, collaborating with development teams to understand their needs and optimize their build processes.
• Participate in activities involving evidence collection for operational controls, as part of Audits (SOC2, ISO, GDPR etc)Build automation required to gather artefacts necessary to assess security and operational controls.

Required education
Bachelor's Degree

Preferred education
Master's Degree

Required technical and professional expertise

• Minimum 6+ years of experience in Cloud environment in the role of DevOps
• Expertise with continuous integration & continuous deployment tools and strategies.
• Hands on experience with Infrastructure as Code (Terraform).
• Demonstrated experience working with Cloud infrastructure (VPC, Kubernetes/OpenShift, Istio).
• Experience using cloud-native systems for monitoring and alerting (e.g. Prometheus, Grafana, Kafka)
• Understanding of endpoint security best practices (TLS, HTTPS, TLS Certificates, WAF, Network Traffic Analysis)
• Proficient in any one of the high-level programming language such as Python, JavaScript, Java, or Go to deliver operational automation
• Desire to design, build, and maintain highly efficient, secure and scalable software build systems.
• Demonstrated skills with troubleshooting, debugging, maintaining and improving existing software.
• Experience working with any version control system (Git preferred).
• Experience working with and configuring Security and Compliance tooling for source and image vulnerability management, runtime security posture assessment etc (SAST/DAST scans, container image vulnerability scanner etc), knowhow of security controls (NIST) and its applicability to Cloud Services
• Excellent analytical and problem-solving abilities, with a keen attention to detail.
• Excellent verbal and written communications skills.
• Certified Kubernetes Administrator Certification (CKA)

Preferred technical and professional experience

• Knowledge of IBM Cloud services and management, with an emphasis on deploying and scaling applications in a cloud environment.
• Solid foundation in Linux internals, including system calls, file systems, and kernel debugging.
• Understanding of networking principles and protocols.
• Knowledge of security testing techniques to identify vulnerabilities in software and infrastructure.
• Genuine interest in building efficient and highly performant software.
• Ability to quickly learn new technologies and adapt to changing technical environments.
• Networking Certification : CCNA, Juniper (JNCIA), Coud Networking are highly desirable.
• Cloud DevOps Certifications on hyper scalar are highly desirable.

Years of Experience:
6-12