KUBRA is in growth mode and seeking a talented Platform DevSecOps Engineer to join our DevOps team!
In this role you will design build and operate KUBRAs Internal Developer Platform (IDP) empowering product teams to deliver observe and secure microservices with speed and reliability. This is a software-centric engineering position where youll leverage your expertise in Python/Go Terraform and Kubernetes to create self-service infrastructure and streamline automation. A key aspect of the role involves integrating and automating AWS managed security services ensuring security is seamlessly built into the platform without compromising developer productivity.
This is a hybrid position based out of our office in Mississauga Ontario.
What you get to do every day!
Strengthen the configuration of security related aspects of the KUBRA HQ cloud platform environment including with focus on Kubernetes.
To ensure success as a Platform DevSecOps Engineer you should demonstrate experience and creativity in the following areas: Cloud Security Application Security Network Security Systems Security and Security Automation.
Develop reusable Terraform modules and Kubernetes policies and templates that abstract cloud complexity.
Enforce clusterwide security guardrails using Kyverno (or OPA Gatekeeper) policies AWS IAMRoles for ServiceAccounts network policies and Pod Security Standards.
Automate policy testing drift detection and remediation through GitOps pipelines so every upgrade addon or workload remains compliant.
Automate build test and release workflows using CircleCI and ArgoCD; enforce policy as code and automated security scans.
Support and improve IaC configurations for some AWS managed services such as AWS WAF.
Implementsecurity findings pipelines using eventdriven automation to various security tools; collaborate with Security Operations on remediation runbooks.
Engage with product teams to collect feedback and evolve the platform backlog; run demos write RFCs and maintain documentation.
Champion best practices for resiliency cost optimization and minimalfriction security.
Implement security controls and best practices across CI/CD pipelines.
Provide security guidance to product engineering teams building software applications in compliance with industry standards in public cloud environments.
Collaborate with development teams to implement secure coding practices.
What kind of person should you be
Practice Security as Code to ensure security baked in and automation.
Excellent verbal and written communication skills.
Highly organized and responsible.
Excellent written and verbal communications skills and an ability to maintain a high degree of professionalism in all client communications.
Understanding and following the business strategy objectives and adjusting to performance metrics.
Excellent organization time management problem-solving and analytical skills.
Ability to handle pressure and focus on results.
What skills do you need
4years in Platform Engineering DevOps or Software Engineering with demonstrable coding experience in Go or Python.
Deep expertise with Terraform and GitOps workflows.
Handson operation of Kubernetes and AWS networking.
Proven track record automating at least one AWS managed service.
Experience building in or supporting highlyregulated environments (SOC2 PCIDSS).
What can you expect from us
Award-winning culture that fosters growth diversity and inclusion for all
Annual performance-based bonus
Flexible schedules
Paid day off for your birthday
Two paid days for volunteer opportunities
Generous benefit coverage with low premiums ( a Health Care Spending Account)
RRSP Matching
Free unlimited access to our refreshment stations (fully stocked with tea coffee and other beverages)
A free premium membership for Headspace; an app geared towards mental health and wellbeing
Access to Perkopolis retail discounts
Access to LinkedIn learning courses
Continued education with our education reimbursement program
Disclaimer: Drjobpro.com is only a platform that connects job seekers and employers. Applicants are advised to conduct their own independent research into the credentials of the prospective employer.We always make certain that our clients do not endorse any request for money payments, thus we advise against sharing any personal or bank-related information with any third party. If you suspect fraud or malpractice, please contact us via contact us page.