Senior DevOps Engineer - IAC Terraform

Description :

Responsibilities :

- Deploy and maintain Kubernetes clusters and manage application workloads using Helm and/or ArgoCD.

- Build and enhance secure, scalable CI/CD pipelines using GitHub Actions, Jenkins, GitLab CI, and ArgoCD.

- Implement best practices in containerization using Docker, including image hardening and container runtime security.

- Integrate quality gates in CI/CD, including automated testing, code coverage, and SonarQube configuration.

- Ensure secure CI/CD processes, including secrets management, least-privilege access, and hardened build agents.

- Implement and maintain cloud security best practices : IAM roles and policies, network segmentation, encryption, and vulnerability management.

- Collaborate with security teams to embed DevSecOps practices (shift-left security, scanning in pipelines, policy-as-code).

- Contribute to system architecture, monitoring, and observability using modern tools and

practices.

- Participate in incident response, post-incident reviews, and root cause analysis.

Must-Have Skills :

- Strong proficiency in Google Cloud Platform (GCP) and solid working experience with AWS.

- Hands-on experience with Terraform and Infrastructure as Code (IaC).

- Strong experience with Kubernetes, Docker, and Helm in production.

- Expertise with CI/CD tools : Jenkins, GitLab CI, GitHub Actions, ArgoCD.

- Experience with SonarQube and static code analysis integration.

- Practical cloud security experience (IAM, VPC, firewalls/security groups).

- Secrets management experience (Secret Manager / Secrets Manager / Vault).

- Experience with image and dependency scanning.

- Knowledge of secure software development practices.

- Strong scripting skills in Python, Go, or Bash.

- Excellent written and verbal communication skills.

Good to Have :

- Certifications : GCP Professional DevOps Engineer, GCP Architect, AWS DevOps Engineer, etc.

- Knowledge of compliance frameworks (ISO 27001, CIS Benchmarks, NIST).

- Experience with monitoring tools (Prometheus, Grafana).

- Experience with logging stacks (ELK, Loki, etc.).

- Exposure to policy-as-code and security tools (OPA, scanners).

Soft Skills :

- Strong problem-solving abilities.

- Ability to mentor junior engineers.

- Confidence in presenting technical concepts to diverse stakeholders.