Senior DevOps Engineer, Cloud Security

About The Role

We are seeking a Senior DevOps Engineer to help build and maintain the infrastructure powering our ecommerce platform with a focus on Cloud Infrastructure Security. We believe that moving fast is our competitive advantage; that moving fast enables us to better serve our users. We also know that the faster we move, the more risk we face causing disruptions, so we invest heavily into observability and security tools.

Responsibilities

• Play a critical role on our Cloud Security strategy: Manage and resolve vulnerability findings related to Cloud Infrastructure, work with the SOC on enriching data sources such as our SIEM and various cybersecurity toolsets.
• Implement security and compliance related controls inline with HIPAA, PCI, and NIST
• Independently lead key projects in support of business, security and technology strategy.
• Manage Infrastructure through automation (Infrastructure as Code - terraform knowledge preferred)
• Perform and run blameless RCAs on incidents and outages aggressively looking for answers that will prevent incident reoccurrence.
• Define, Design, and implement DevOps practices ensuring security, availability and scalability of production systems with a strong focus on excellent customer experience
• Manage incidents and emergency response, track outages, ensure data integrity and engineer releases to promote secure, efficient and rapid deployments. There will be an On-call rotation but it will be fairly distributed across the team, including the manager, who also takes a weekly rotation!
• Troubleshoot various production or non-production issues and alerts and identify the root cause

Qualifications

• 5+ years as a DevOps Engineer, Site Reliability Engineer or Platform Engineer
• 10+ years of total experience supporting technical environments within Engineering domains
• Bachelor's degree in Computer Science, Engineering, or related field, or relevant years of work experience
• Experience with service-oriented architectures and microservices at scale
• Strong proficiency with Public Cloud providers (AWS, GCP)
• Experience with Terraform or other IaC tools such as Chef, Puppet or Ansible
• Experience with CI/CD tools such as Jenkins, CircleCI or GitHub Actions
• Ability to use containers and orchestration frameworks (Kubernetes, Docker, Container registries etc.) -EKS + Helm Experience is a plus.
• Experience with both Cloud Security Vulnerability tooling as well as endpoint protection and OS security.
• Proficiency scripting in one or more languages such as Python, Bash, Go and/or others
• Experience with configuring, customizing, and extending monitoring tools (Datadog, ELK, Prometheus, etc.)
• Excellent debugging and troubleshooting skills
• Strong technical competency, with a data-driven analytical approach towards solving complex challenges
• Have a systematic problem-solving approach, coupled with strong and effective communication skills and a sense of drive
• Knowledge of information security standards rules and regulations related to information security and data confidentiality (e.g. HIPAA, PCI DSS, NIST, ISO, etc.)