DevSecOps Engineer

Job Description:

RESPONSIBILITIES:

• Setup and maintain multiple AWS-based environments;

• Create and debug CI/CD building and deployment plans;

• Support of the deployment system for web services (Bamboo, Java, JavaScript, Docker, ECS Fargate);

• Development team support (Git, IT, Database troubleshooting);

• Project tools ownership and maintenance : Jira, Confluence, Bitbucket, Bamboo, Teams, SonarCloud

#LI-SM1

Job Requirements:

MUST-HAVE REQUIREMENTS:

• Experience with AWS;

• Experience with CloudFormation;

• Experience with Git and multi-developer git workflow;

• Experience with Docker and Docker orchestration (AWS ECS);

• Experience with CI/CD: Bamboo

• Scripting: Python, Bash

• English skills: writing and verbal communication (Upper Intermediate+)

• Secure Software Development Life Cycle (SSDLC)

• Principle of least privilege and its implementation in software development and infrastructure

• Audit logs management and monitoring

• Secrets management

• PKI

• Experience with security tools for scan, detect, and analyse security issues, vulnerabilities, CVE, environment configuration

WOULD BE A PLUS:

• Experience with migration of complex systems

• Experience with SQL queries and Database administration (MySQL preferred);

• Database planning skills;

• Coding experience with JAVA and JS;

• Windows Powershell;

• Experience with C++ ecosystem

• Experience with automation tools like Terraform, Ansible, Chef, Puppet;

• Experience Swarm, K8S

• Strong analytical skills

• Knowledge of security compliance standards like HIPAA, HIPAA PHI

• Knowledge of OWASP projects like: OWASP Top ten, OWASP Application Security Verification Standard, OWASP Web Security Testing Guide etc

Operating Company:

Ormco

Envista and its family of companies (Envista) will not accept unsolicited resumes from any source other than directly from a candidate.  Envista will consider unsolicited referrals and/or resumes submitted by vendors such as search firms, staffing agencies, professional recruiters, fee-based referral services and recruiting agencies (Agency) to have been referred by the Agency free of charge and Envista will not pay a fee for any placement resulting from the receipt such unsolicited resumes.  An Agency must obtain advance written approval from Envista's internal Talent Acquisition or Human Resources team to submit resumes, and then only in conjunction with a valid fully-executed contract approved by the Global Talent Acquisition leader and in response to a specific job opening.  Envista will not pay a fee to any Agency that does not have such agreement and written approval in place.