Senior DevOps Engineer

Vidio


Tanggal: 6 jam yang lalu
Kota: Pekerjaan jarak jauh, Pekerjaan jarak jauh
Jenis kontrak: Penuh waktu
Jarak jauh
Responsibilities

  • Cloud security posture across our environment — continuous configuration assessment against CIS benchmarks, drift detection, and driving remediation to done rather than to a backlog
  • Guardrails as code — SCPs, policy-as-code (OPA/Kyverno), and secure-by-default
  • Terraform modules so misconfigurations are prevented, not just reported
  • IAM and least-privilege at scale — access reviews, secrets management, key rotation, and killing standing over-permissive access
  • Hardening of cloud hosts and servers — golden images, CIS-benchmarked baselines, patch cadence, and bastion/SSH controls
  • Employee endpoint hardening (~30% of the role) — MDM, EDR, disk encryption, and OS baselines across the laptop fleet
  • Security built into CI/CD and infrastructure automation — everything as code
  • Partnering with and leveling up other engineers, making the secure path the easy default instead of a blocker
  • Scaling all of the above to millions of users without slowing delivery down

Requirements

  • Strong Linux system administration
  • Infrastructure as code — Terraform (or Ansible/Chef/Puppet)
  • Containers and Kubernetes in production
  • At least one high-level language: Python, Ruby, or Go, plus comfort writing

shell scripts

  • Solid understanding of DNS, TCP/IP, HTTP, TLS, and CDN
  • Hands-on with at least one major cloud: AWS, GCP, or Azure

Requirements — Cloud Security (required)

  • IAM and least-privilege design, not just usage
  • CIS benchmarks and host/OS hardening baselines
  • Secrets management and encryption at rest and in transit
  • Hands-on experience with a Cloud Security Posture Management (CSPM) tool —

Wiz, Prowler, Scout Suite, AWS Security Hub, or GCP Security Command Center

  • A preventive, guardrails-as-code mindset over scan-and-ticket

Bonus Points

  • Endpoint management experience — Jamf, Intune, or Kandji
  • A cloud security certification such as AWS Security Specialty or CKS
  • Monitoring/alerting experience — Datadog, Prometheus
  • Experience with high-traffic or streaming platforms
  • Exposure to compliance frameworks (PCI-DSS, ISO 27001)
  • Comfortable using AI/LLM tooling to accelerate IaC, runbooks, and triage —

with sound judgment about handling sensitive data

Cara melamar

Untuk melamar pekerjaan ini, Anda perlu otorisasi di situs web kami. Jika Anda belum memiliki akun, silakan daftar.

Posting CV

Pekerjaan serupa

Supervisor Retail Engagement - East Java & Bali, NusRa

PT HM Sampoerna Tbk., Pekerjaan jarak jauh, Pekerjaan jarak jauh
3 jam yang lalu
BE A PART OF A REVOLUTIONARY CHANGE!At PMI, we’ve chosen to do something incredible. We’re totally transforming our business and building our future on one clear purpose – to deliver a smoke-free future.With huge change, comes huge opportunity. So, wherever you join us, you’ll enjoy the freedom to dream up and deliver better, brighter solutions and the space to move...

CBS - Internal Audit (System & Procedure) Senior Associate

EY, Pekerjaan jarak jauh, Pekerjaan jarak jauh
5 jam yang lalu
Join our Core Business Services (CBS) team and you will help support the important business enablement functions that keep our organization running strong. As a CBS professional, you will work across teams to provide the knowledge, resources and tools that help EY deliver exceptional quality service to our clients, win in the marketplace and support EY’s growth and profitability. Major...

HVAC- DC ( E- Band)

Larsen & Toubro, Pekerjaan jarak jauh, Pekerjaan jarak jauh
7 jam yang lalu
Design Engineer - MEP (HVAC)Job FunctionEDRCRoleDesign Engineer - MEP (HVAC)Sub Job FamilyMechanical, Electrical and Plumbing (MEP)BandE BandSECTION II: ROLE SUMMARY (Purpose of the Role)To support HVAC design and documentation activities ensuring system performance and coordination across services.SECTION III: KEY RESPONSIBILITIES/ ACCOUNTABILITIESData Centre specific HVAC System design in compliance with UPTIME/ TIA / ASHRAE TC 9.9 requirements.Prepares heat load calculations, Chilled...