About the job

Job Title: DevOps Engineer 

Industry: IT-Software / Software Services 

Job Type: Full Time 

Time: 7:00 AM – 4:00 PM 

Location: Kalopul, Kathmandu 

Working Days: Monday-Friday 

Experience: 3+ year

Job Overview:

We are seeking an experienced DevOps Engineer to join our dynamic team. This role offers an exciting opportunity to enhance the efficiency and reliability of our software delivery processes. As a DevOps Engineer, you will gain hands-on experience with cutting-edge technologies and play a vital role in our software development lifecycle.

Roles:

• Security Integration : Embed security practices into the DevOps process from the start.
• Collaboration : Work closely with development, operations, and security teams. and promote a culture of security awareness.
• Automation : Implement and manage automated security tools and processes for automate security testing, vulnerability scanning, and compliance checks.
• Monitoring and Incident Response : Monitor for security vulnerabilities and incidents bye developing and implementing incident response plans.
• Compliance and Governance : Ensure compliance with industry standards and regulation and maintain documentation for audits.
• Infrastructure as Code (IaC): Manage infrastructure using IaC tools like Terraform and Ansible by ensuring secure and efficient deployment and scaling of infrastructure
• Continuous Integration and Continuous Deployment (CI/CD) : Design, implement, and maintain CI/CD pipelines by ensuring pipelines are secure, efficient, and scalable.

Responsibilities:

• Security Best Practices : Develop and enforce security best practices and guidelines.
• Vulnerability Management : Identify and prioritize security vulnerabilities and implement remediation strategies and track progress.
• Secure Development : Collaborate with developers on secure coding practices
• Continuous Improvement : Continuously evaluate and improve security tools and processes
• Tooling and Infrastructure : Manage security tools like CI/CD pipelines and vulnerability scanners.
• Incident Handling : Detect, analyze, and respond to security incidents.
• Policy Development : Develop and maintain security policies and procedures.
• Risk Assessment : Conduct regular security risk assessments and audits and provide recommendations for risk mitigation.
• Performance Metrics : Define and track key performance indicators (KPIs) related to security and report on the effectiveness of securit measures.
• Threat Modeling : Conduct threat modeling exercises to identify potential threats and implement security controls with architects and developers.
• Incident Response Drills : Conduct regular incident response drills to test plans
• Infrastructure Management : Manage and optimize cloud and on-premises infrastructure for infrastructure scalability, reliability, and security
• Deployment Automatio: Automate the deployment of applications and services for seamless and secure deployment processes.