What are the responsibilities and job description for the Senior Cloud DevOps Security Engineer position at RGBSI?
Job Description:
- The Sr. Cloud DevSecOps Engineer will design, deploy, operate, and maintain Google Cloud infrastructure while ensuring efficiency and security.
- Responsibilities include managing infrastructure as code, collaborating with other teams, automating procedures, monitoring services, and optimizing system performance.
Responsibilities:
- Support the design, development, and management of a robust, secure, scalable, highly available, and dynamic solution on Google Cloud to support business objectives
- Collaborate with other Engineers, Developers when designing new or improving the cloud solution
- Deploy and maintain infrastructure as code (IAC) and SRE principles using tools like Terraform and Github actions
- Ensure efficient functioning of data storage and processing functions in accordance with company security policies and best practices in cloud security
- Proactively monitor the health of cloud infrastructure, responding to incidents, and resolving issues as they arise
- Automate regular operational tasks and processes to reduce the risk of human error and increase efficiency
- Create and maintain detailed documentation and standard operating procedures (SOPs) for the setup and maintenance of cloud infrastructure
- Perform root cause analysis for service interruption recovery, creating preventative measures to deploy in the enterprise
- Keep abreast of new GCP services, features and security best practices that could enhance functionality security or reduce costs
- Support the management and maintenance of monitoring solutions (including analytics, infrastructure, networking, user access management, security, fault tolerance, and disaster recovery) to provide visibility into performance and operational health
- Help to implement industry cloud best practices for security, performance, cost, & resiliency in all aspects of design & implementation
Required Qualifications:
- Minimum of a Bachelor's degree in Computer Science or a related field and at least 5 years of relevant experience in a devops or security role, OR At least 7 years of relevant experience in a devops or security role in lieu of a degree
- Google Cloud Platform Certifications and/or demonstration experience building solutions with Google Cloud Platform (GCP) services
- Experience working with information security frameworks and standards (HIPPA, ISO27001, NIST, GDPR)
- Experience automating and deploying applications using cloud services in AWS, GCP or Azure
- Experience setting up, developing, and configuring DevSecOps CI/CD Pipelines
- Experience scripting with at least one of the following languages (PowerShell, Python, BASH)
- Demonstra experience working with cloud environments in one or more of the following areas:
- Agile methodologies including Scrum or Kanban
- CI/CD tools (ADO, Jenkins, GitLab, Artifactory, Github
- Containerization and container management with Kubernetes
- Security automation with SAST and DAST tools like (SonarQube, Tenable Nessus, Burp Suite)
- IaC tools (Terraform, Ansible, Cloud Formation)
- Cloud Security best practices and architectures
- Git, Git Flow.
Preferred Qualifications:
- Expertise in programming
- Relevant experience in the Healthcare domain, specifically centered around Imaging (as a PACS Administrator, IT in Hospital space, etc.).
