Purpose of the job

• We are seeking a DevSecOps Engineer with experience in designing, implementing and maintaining secure and large-scale, high-performance systems using AWS, Terraform, Kubernetes and Docker. The ideal candidate will have a strong background in infrastructure automation and be comfortable working with a variety of different technologies. They will work closely with development teams to integrate security practices into the software development lifecycle and ensure compliance with industry standards.
• This is an exciting opportunity to work on a wide range of projects and be part of a team that is driving engineering and security innovation.. If you are a highly motivated, results-driven individual with a passion for infrastructure automation and scaling, we encourage you to apply.

Key Responsibilities

• As a DevSecOps Engineer, you will act as an escalation point for any Cloud/CICD based issues.
• You will act as an expert for cloud technologies (AWS) and advocate standards and best practices to be applied.
• As the security specialist for the infrastructure supporting Collinson’s services, you will be proactively thinking about how to ensure it is secure and resilient, with sufficient monitoring and alerting, allowing you to react to deviations swiftly.
• You will have a good understanding of best practices around Cloud, Network and Application Security, allowing you to handle security alerts confidently, implement standards and provide advice to other engineering teams.
• You will have experience building and running a technical platform which other engineering teams depend on, with developer experience and resilience always in mind.
• Work with various teams to design and implement development pipelines with automation at the heart of every design.
• You will use your architectural experience to not just help deliver development pipelines (CI/CD) but also solution architecture so that every solution is built in a well-thought, forward thinking way.
• Working with partners in other teams to help deliver solutions for Collinson and its companies to market. This involves working with both technical and non-technical personnel and so communication skills must be excellent both written and verbal with the ability to communicate at all levels of the business.
• Responsible for performing root cause analysis for underlying issues and incidents that affect systems performance and availability including proactively identifying and resolving known errors and problems to minimize incident re-occurrence.
• Assist in the analysis and evaluation of vendor supplied software and hardware products in accordance with Company requirements and specifications.
• Helping to translate business and customer requirements into solid and stable solutions.
• Executing projects and tasks independently and with limited direct supervision.
• To provide the technical input into planning and implementation of complex upgrades, installation, and releases.
• To keep abreast of updates in information technology, being able to recommend and evaluate products and services for use within group and communicating said recommendations effectively.
• Expected to make recommendations for improvement in respect of security processes, tooling and operational support.
• Being part of the on-call rotation will be expected and required, to ensure our customer always get the best experience.

Knowledge, skills and experience required

• Awareness of PCI and ISO27001 and the impact these have on infrastructure, networks and application designs
• Proven track record of implementing secure and scalable cloud solutions specifically on AWS and managing AWS Security Hub Controls.
• Experience with automated testing and deployment methodologies.
• AWS Certified to demonstrate theoretical awareness of best practices
• Extensive experience with AWS services, including EC2, S3, IAM, VPC, and Lambda.
• Understanding of Source Control Systems, specifically Git.
• Experience with Infrastructure as Code, including a working knowledge of Terraform
• Scripting experience in either PowerShell, Bash, or Python
• Familiar with Containerisation, specifically Docker & Kubernetes
• Linux and Windows Server experience
• Experience with monitoring and logging tools, ideally AppDynamics and Datadog
• Working knowledge of networking technologies, including DNS, Firewall Configuration, WAF and Load Balancing.
• Passionate to learn and develop new skills and experience.