Position: DevOps/SecOps Engineer
Location: Hybrid
Employment Type: Full-Time

Role Overview

As a DevOps/SecOps Engineer, you will be responsible for managing and optimizing Homefile’s infrastructure, ensuring high availability, scalability, and security across our systems. You will work closely with engineering and product teams to implement CI/CD pipelines, automate workflows, monitor system performance, and safeguard our applications and data. This role combines the principles of development and operations with a strong emphasis on security, ensuring that Homefile’s systems are robust, resilient, and compliant with industry best practices.

Key Responsibilities

DevOps Responsibilities

• Design, implement, and manage cloud infrastructure (preferably AWS, Azure, or GCP) to ensure scalability, reliability, and efficiency.
• Develop and maintain CI/CD pipelines for automated build, test, and deployment processes.
• Automate infrastructure provisioning and configuration management using tools like Terraform, Ansible, or CloudFormation.
• Monitor system performance, availability, and capacity using tools like Prometheus, Grafana, or Datadog, and implement solutions for incident response and recovery.
• Optimize resource utilization and implement cost-saving measures for cloud environments.
• Collaborate with engineering teams to ensure smooth integration of development and deployment processes.

SecOps Responsibilities

• Implement and enforce security best practices across infrastructure and applications, including identity and access management, encryption, and secure configurations.
• Monitor and manage vulnerabilities using tools like OWASP ZAP, Nessus, or Aqua Security and remediate security issues promptly.
• Develop and maintain policies for incident response, disaster recovery, and business continuity planning.
• Manage secrets and credentials securely using tools like HashiCorp Vault, AWS Secrets Manager, or Azure Key Vault.
• Perform regular audits, security assessments, and penetration tests to ensure compliance with security standards such as SOC 2, ISO 27001, or GDPR.
• Monitor logs and detect anomalies using SIEM tools like Splunk, ELK Stack, or Sumo Logic.

Collaboration and Documentation

• Work closely with developers to integrate security into the SDLC (Secure Development Lifecycle).
• Provide documentation and training on DevOps/SecOps tools and practices to the broader team.
• Act as a liaison between development, IT, and security teams to align operational and security goals.

Qualifications

Experience:

• 3+ years in a DevOps, SecOps, or related engineering role.
• Strong experience managing cloud platforms like AWS, Azure, or Google Cloud.

Technical Skills:

• Proficiency in containerization and orchestration tools like Docker and Kubernetes.
• Experience with Infrastructure as Code tools such as Terraform, Ansible, or CloudFormation.
• Strong understanding of CI/CD pipelines and tools such as Jenkins, GitHub Actions, or GitLab CI/CD.
• Familiarity with monitoring and alerting tools like Prometheus, Grafana, or New Relic.
• In-depth knowledge of network security, encryption protocols, and security frameworks.
• Experience with vulnerability scanning and remediation tools.

Other Skills:

• Strong scripting abilities (e.g., Python, Bash, or PowerShell).
• Excellent troubleshooting and problem-solving skills.
• Strong communication and collaboration abilities.
• Certifications such as AWS Certified DevOps Engineer, Certified Kubernetes Administrator (CKA), CompTIA Security+, or similar.
• Experience with zero-trust architectures and microsegmentation.
• Familiarity with compliance standards like SOC 2, HIPAA, or ISO 27001.
• Experience with log management and security monitoring tools (e.g., ELK Stack, Splunk, Sumo Logic).
• Knowledge of serverless computing frameworks such as AWS Lambda or Azure Functions.