Position: Middle SycOps/DevOps
Company: Under Defense
Experience required: 2y
English level: upper

Our client is the #1 vendor of VPN and data security in the world.  It's about thousands of servers in the cloud serving 25+ million users every month, processing over a billion API calls every day and generating ~1 TB of data. We looks for DevOps engineers who want to play with security.

Role descriptions:
- Reviewing and improving operational system and network configurations according to internal requirements and policies;
- Improving and implementing security and infrastructure protection features 
- Participate in SecOps processes: Access Management, Vulnerability Management, Security Incidents Management, Project Analysis;
- Interaction with other teams to improve information security
- Raise concerns and findings with management with regards to policy violations or security gaps
- Able to communicate “up”.   Needs to engage with engineering leadership to demonstrate and validate concerns.

Example of last projects and tasks:
- Participation in the creation of Bastions hosts with vault-ssh integration;
- Compliance Review of data storage in the database according to internal policies;
- Integration afctl tool with Vault authentication;
- Adding Vulnerability Scanning for images and CodeQl scanning for GitHub actions;
- Working with GDPR requirements and Customer questionnaire;
- AWS WAF configuration

Requirements:
- Mandatory experience or deep knowledge how it works:
    1. Demand deep knowledge of Linux OS (Customer has 700 Linux hosts)
    2. AWS cloud (GCP and Azure - nice to have)
    3. Python scripts
    4. Docker
    5. Kubernetes
    6. Configuration management (e.g. Ansible)
    7. Github + Github Actions
    8. Hashicorp Vault 
    9. TLS/SSL
    10. Open Source VPN protocols   
- Nice to have experience or at least understand how it works:
    1. Cloud Security Principles (e.g AWS Security Pillar)
    2. OWASP Projects
    3. SAST/DAST 
    4. PK
- English - upper-intermediate.