What are the responsibilities and job description for the DevOps Engineer position at AppGate?
About Position
Design, implement, and optimize development and operations processes by automating CI/CD workflows, managing cloud infrastructure (AWS), and continuously improving systems. Ensure the scalability, security, and efficiency of technology services by adopting DevOps best practices, including monitoring, observability, and compliance with security standards. Collaborate with development, operations, and security teams to standardize processes, reduce operating costs, and ensure business continuity through innovative and automated solutions.
Description and Functions
Integration and Continuous Deployment:
Design and deploy CI/CD pipelines using tools such as GitHub Actions for Lambdas and other services.
Use Advanced CI/CD flows with GitHub Action to centralize.
Automation:
Automate operational processes such as certificate management, server patching, on-demand QA resource creation, and database compaction (MongoDB).
Develop scripts in Python, Bash, or similar to optimize repetitive tasks and reduce errors.
Cloud Infrastructure Management:
Manage and optimize AWS services such as RDS, ECR, EKS, and Lambda, including migrations and upgrades.
Deploy Infrastructure as Code (IaC) with Terraform or CloudFormation to standardize and scale resources
Monitoring and Observability:
Configure and centralize tools such as Grafana, Zabbix and CloudWatch for monitoring infrastructure and services.
Create alerts based on metrics (e.g. certificates about to expire, volumes available >24h/48h) and logs.
Security and Compliance:
Review and update TLS protocols (deprecating 1.0/1.1), manage IAM policies in Lambdas, and enforce CIS standards through AWS Security Hub.
Automate corporate certificate renewal and strengthen security in CI/CD flows.
Cost Optimization:
Optimize resources in RDS, identify and remove unused EBS, and monitor efficient use of infrastructure in AWS.
Container Management:
Dockerize applications (e.g. APIs) and manage EKS clusters for QA and production.
Update containerized operating systems (Docker) and orchestrators.
Collaboration and Engagement:
Standardize CI/CD flows and domains, and document processes to facilitate adoption by other teams
Work with development and security teams to implement solutions such as Service Mesh (Istio) and advanced monitoring.
Infrastructure Management:
Manage and optimize cloud infrastructure (AWS) and on-premise infrastructure, ensuring scalability and efficiency.
Implement configuration and version management policies to maintain consistency and traceability of changes.
Manage and maintain cloud resources, including compute, networking, storage, and database instances.
Continuous Improvement:
Evaluate and adopt new tools to improve operational efficiency.
Lead technology migrations
Technical Documentation:
Contribute to the creation and maintenance of technical documentation to ensure that the implemented solutions are understandable and reproducible
Document operational procedures and standards to facilitate knowledge and training within the team.
Time Availability:
Have time availability to attend to emergencies, perform scheduled maintenance and resolve critical incidents.
Adapt to work outside of regular working hours, including nights, weekends and holidays, thus guaranteeing the operational continuity of systems and services at all times.
Requirements
Systems Engineering, Electronic Engineering, Telematics or related careers.Postgraduate (Optional, replaceable by experience):
Specialization in DevOps, Software Engineering or Cloud Infrastructure Management.
Master's degree in related areas.
Valued Certifications:
AWS Certified DevOps Engineer – Professional.
Certified Kubernetes Administrator (CKA).
Terraform Associate
Docker Certified Associate.
Knowledge in:
Infrastructure as Code (IaC): Terraform, CloudFormation.
Automation: GitHub Actions, Ansible, scripting (Python, Bash).
AWS: RDS, Lambda, ECR, EKS, Security Hub, Config.
Containers: Docker, Kubernetes, Rancher.
Monitoring: Grafana, Zabbix, CloudWatch, OpenSearch, OpenTelemtry
Databases: MongoDB (compaction), RDS (optimization).
Security: Certificate management, TLS, IAM, Service Mesh (Istio).
Operating Systems: Ubuntu, updates and patches. Monitoring and observability (Grafana, Zabbix, CloudWatch).
Security and compliance (TLS, IAM, CIS).
