Website:
sphere360io.com
Job details:
Responsibilities:
a) Own and manage CI/CD pipelines across development, staging, and production environments.
b) Manage end-to-end software release cycles, including deployment, rollback, release approvals, and production validation.
c) Build and maintain automated build, test, deployment, and security pipelines.
d) Manage and optimize AWS infrastructure and services, including compute, networking, storage, databases, IAM, monitoring, and security.
e) Administer and secure Linux servers, containers, cloud infrastructure, and production environments.
f) Implement server hardening, patching, access controls, secrets management, encryption, and vulnerability remediation.
g) Develop and troubleshoot automation and internal tools using Python, Go, JavaScript/TypeScript, or similar programming languages.
h) Implement DevSecOps practices across the software development lifecycle.
i) Perform vulnerability assessments and security testing of web applications, APIs, infrastructure, and mobile applications.
j) Conduct penetration testing, identify, prioritize, track, and remediate security vulnerabilities and infrastructure risks.
k) Monitor production systems using logging, metrics, tracing, alerting, and observability tools.
l) Implement backup, disaster recovery, business continuity, and system resilience practices.
m) Work closely with developers to improve secure coding, deployment, and operational practices.
n) Maintain security, infrastructure, deployment, and operational documentation.
o) Support security audits, compliance requirements, customer security assessments, and risk-management activities.
p) Continuously evaluate and adopt modern DevOps, cybersecurity, open-source, and AI-assisted development tools.
q) Use tools such as Cursor, Claude, GitHub Copilot, or equivalent AI tooling responsibly to improve development, automation, troubleshooting, and security workflows.
r) Help establish and continuously improve the Sphere's DevSecOps and cloud-security practices.
Preferred Qualifications:
- 3–5 years of professional experience in DevOps, DevSecOps, Cloud Engineering, SRE, Platform Engineering, or a related role.
- Bachelor's degree in Computer Science, Engineering, IT, Cybersecurity.
- Strong programming/development experience is mandatory.
- Strong hands-on experience with AWS and cloud infrastructure. GCP, Azure is additional plus.
- Strong experience designing and managing CI/CD pipelines.
- Experience managing software release cycles and production deployments.
- Strong Linux administration and troubleshooting skills.
- Experience with Docker and containerized applications including Kubernetes/EKS.
- Strong understanding of **Git and software development workflows.
- Good understanding of networking concepts including DNS, HTTP/HTTPS, TCP/IP, TLS, load balancing, firewalls, and VPCs.
- Experience with cloud/server security, IAM, secrets management, encryption, and system hardening.
- Experience with vulnerability assessment and penetration testing.
- Experience testing web applications and APIs; mobile application security testing is a strong plus.
- Strong scripting and automation capabilities.
- Experience with monitoring/observability tools such as Prometheus, Grafana, ELK/OpenSearch, CloudWatch, Datadog, or similar is desirable.
- Strong understanding of software development lifecycle, application architecture, APIs, databases, and production systems.
- Strong open-source mindset and ability to evaluate, adopt, and work with modern open-source tools.
- Strong understanding of security, risk management, vulnerability management, and incident response.
- Experience in banking, FinTech, payments, insurance, cybersecurity, or other regulated industries is a strong advantage.
- Familiarity with **PCI DSS, SOC 2, ISO 27001, NIST, CIS benchmarks, or similar security frameworks** is a plus.
- Strong analytical, debugging, communication, and problem-solving skills.
- Ability to work independently, take ownership, and operate effectively in a startup environment.
- Demonstrated ability to learn new technologies and security tools quickly.
Click on Apply to know more.
