Deskripsi pekerjaan DevSecOps Engineer Lead Jejak.in
Jejakin is a tech-driven company focused on environmental sustainability and climate action. We help organizations and individuals track, mitigate, and offset their carbon footprint through our integrated digital platform. As our tech ecosystem scales up, we are looking for a visionary and robust DevSecOps Lead to modernize, secure, and steer our cloud infrastructure transformation.
As a DevSecOps Lead, you will take full ownership of our infrastructure architecture, pipeline automation, and the integration of stringent security standards across our entire product development lifecycle. You will not only act as a primary technical contributor for Infrastructure as Code (IaC) and automation but also lead and mentor a team of engineers to instill an "automation-first" and "security-by-design" culture across the company.
Requirement:
- Bachelor's Degree in Information Technology, Information System, Computer Science, or any tech related field.
- Minimum of 5 years of hands-on experience as a DevSecOps Engineer, SRE, or Cloud Engineer.
- At least 2 years of proven experience in a Lead or Senior capacity, demonstrating the ability to guide technical teams or manage complex architectural projects.
- Deep expertise with major cloud platforms, heavily prioritizing AWS and standard industry principles like the Well-Architected Framework.
- Strong mastery of the Linux environment and command-line interface (CLI).
- Advanced scripting capabilities (e.g., Python, Groovy, or Bash) targeted at complex task automation.
- Extensive practical experience with Jenkins, Terraform/OpenTofu, and containerization tools like Docker and Kubernetes.
- Solid understanding of cloud networking and security standards (VPC, subnetting, security groups, IAM).
- Proven track record working within environments that adhere to strict compliance standards like ISO 27001.
- An "automation-first" mindset focused on building scalable, self-service platforms.
- Highly proactive with excellent ownership and communication skills.
- Professional cloud or security certifications (e.g., AWS Certified DevOps Engineer, AWS Certified Security, CISSP, or equivalent) is preferred.
- Experience or strong interest in MLOps pipelines.
Job Description:
- Lead, mentor, and provide strategic direction to the engineering team on DevOps, SRE, and cyber security best practices.
- Manage, optimize, and fully automate CI/CD pipelines using Jenkins (including pipeline as code), shifting from semi-manual processes to complete automation.
- Design, implement, and govern comprehensive infrastructure management utilizing Terraform/OpenTofu.
- Act as the principal architect in planning, securing, and executing cloud infrastructure migrations, with a strong priority on AWS.
- Seamlessly integrate security tools and practices (SAST, DAST, and vulnerability scanning) directly into the CI/CD pipelines.
- Manage centralized secrets management using HashiCorp Vault / OpenBao and perform rigorous Linux system hardening.
- Ensure all infrastructure systems comply with strict regulatory frameworks, specifically maintaining and aligning with ISO 27001 standards.
- Implement and manage proactive monitoring, logging, and alerting systems (e.g., Prometheus, Grafana, ELK Stack) to guarantee high availability and disaster recovery.
- Work closely alongside Software Engineering teams to refine and streamline build, versioning, and deployment processes.
