DevSecOps Engineer (Hybrid)

Posted:
6/4/2024, 12:49:22 AM

Location(s):
Istanbul, Istanbul, Turkey ⋅ Istanbul, Turkey

Experience Level(s):
Senior

Field(s):
DevOps & Infrastructure ⋅ Software Engineering

Orion Innovation is a premier, award-winning, global business and technology services firm.  Orion delivers game-changing business transformation and product development rooted in digital strategy, experience design, and engineering, with a unique combination of agility, scale, and maturity.  We work with a wide range of clients across many industries including financial services, professional services, telecommunications and media, consumer products, automotive, industrial automation, professional sports and entertainment, life sciences, ecommerce, and education.

Duties and Responsibilities

  • Create, develop, and implement solutions to address infrastructure and security requirements
  • Identify the needs for build automation, designing, and implementing CI/CD solutions
  • Consult on DevSecOps requirements from diverse application/line of business partners
  • Create plug-and-play/reusable solutions and patterns for CI/CD pipelines
  • Create, develop, and implement automation and system integration for various build platforms
  • Publish and disseminate CI/CD best practices, patterns, and solutions
  • Ensure that the service’s uptime and response time SLAs/OLAs are met or surpassed
  • Build or maintain CI/CD building blocks and shared libraries proactively for app and development teams to enable quicker build and deployment
  • Design action plans to address CI/CD platform/tools/solutions’ shortcomings and difficulties
  • Actively participate in bridge calls with team members and contractors/vendors to prevent or quickly address problems
  • Troubleshoot, identify, and fix problems in the DevSecOps domain
  • Ensure incident tracking tools are updated in accordance with established norms and processes, gather all essential data and document any discoveries and concerns
  • Identify management concerns and problems, assess them, and offer prompt solutions and/or escalation
  • Align with technological Systems/Software Development Life Cycle (SDLC) processes and industry-standard service management principles (such as ITIL)
  • Create and publish engineering platforms and solutions

Required Skills and Experience

  • 5+ years of related job experience
  • Comprehensive technical expertise in a variety of DevSecOps toolkits, including Ansible, Jenkins, Artifactory, Jira, Black Duck, Terraform, Git/Version Control Software, or comparable technologies
  • Familiarity with information security frameworks and standards
  • Knowledge of DevOps Automation (TerraFrom, GitHub, GitHub Actions)
  • Familiarity with API Security, Container Security, AWS Cloud Security
  • Knowledge of PCI-DSS, HIPPA, SOX, GDPR, and CCPA Standards and Policies and the associated certification and audit processes
  • Familiarity with Amazon AWS policy, configuration, and security management tools
  • Experience with security automation and machine learning
  • Proven capacity for thinking leadership and a highly creative problem-solver
  • Excellent analytical and interpersonal skills
  • Ability to express technical information clearly at different organizational levels

Preferred Qualifications

  • CISM, CISSP or other Security Certifications
  • Auditing and Compliance Certifications such as CISA

Orion is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, citizenship status, disability status, genetic information, protected veteran status, or any other characteristic protected by law.

Candidate Privacy Policy

Orion Systems Integrators, LLC and its subsidiaries and its affiliates (collectively, “Orion,” “we” or “us”) are committed to protecting your privacy. This Candidate Privacy Policy (orioninc.com) (“Notice”) explains:

  • What information we collect during our application and recruitment process and why we collect it;
  • How we handle that information; and
  • How to access and update that information.

Your use of Orion services is governed by any applicable terms in this notice and our general Privacy Policy.