Senior DevOps with security skills (offline)

Project Overview:

Our customer is a multinational corporation with more than a century of history and offices in over 180 countries. Their most ambitious goal at the time is to introduce a range of Reduced-Risk Products (RRPs), offering smokers a healthier alternative to traditional cigarettes. The target audience is more than 1 billion of consumers around the globe.

Intellias mission is to help a client with the engineering of a comprehensive software ecosystem for a game-changing IoT product on the margin of innovative consumer experience and cutting-edge technology. Our teams are involved in the engineering of core platform components for best in class eCommerce, Digital Marketing and IoT solutions. As a DevOps engineer you will become a part of Core Architecture Team and be responsible for the implementation of best practices in our Digital Engineering Enterprice Platform.

The Platform is a set of services and internet applications that accelerate the development and delivery of software applications by taking care of common SDLC challenges. The Platform provides access and consumption for engineering teams to a set of services, technologies, practices for their development and for operating their application, ensure a set of compliance and best practices.

Key Responsibilities:
- Develop, test and implement new platform features using modern software engineering practices as part of a Scrum Team;
- As a member of the Platform Engineering team, you will build and maintain the monitoring and alerting stack of the platform and ensure its 24/7 reliability and availability by applying modern SRE practices;
- Work closely with Cloud Operations, Infrastructure Architecture and others to drive continuous improvement of the platform;
- Work closely with Information Security, Compliance and others to ensure the platform is built and operated in accordance with strict security and quality
requirements.

Technical Skills:
- 3+ year of experience with CI/CD principles and tooling [Git, Terraform, Jenkins, Artifactory];
- 3+ year experience with AWS focus on security and 1+ year with Kubernetes secure deployment;
- 3+ year experience with scripting language;
- Experience with IAM provider (Azure AD), Vault (Hashicorp) and OpenVPN and similar;
- Significant knowledge of security best practices for cloud native architectures, both on development and deployment;
- Experience with cloud-based security management SIEM tools, e.g. Splunk (nice to have) or ELK;
- Proven track record in supporting development teams in security area throughout all phases of systems development life cycle (design, threat modelling, development, maintenance);
- Hands-on experience with integration of SAST, DAST and SCA tools into CI/CD pipelines;
- Sound knowledge of impact and remediation techniques for vulnerabilities from and outside of OWASP Top 10;
- Sound knowledge on modern authentication/authorization frameworks, methods and technologies (OAuth2.0, OIDC, JWT);
- 2+ year experience with scrum approach;
- Nice to have understanding or experience about SOP (Standard Operating Procedure), SOX Compliance, Audit Control.

To be ready to travels.