Cloud DevSecOps Engineer

Regions Bank is dedicated to providing a career-oriented environment for its associates. The Cloud DevSecOps Engineer will focus on developing and implementing secure cloud CI/CD pipelines while collaborating with stakeholders to automate deployments and enhance security practices.

Responsibilities:

• Assists with releasing candidate CI/CD pipelines as a mechanism to communicate the states and steps necessary to determine a release candidate for each application and service
• Designs and develops fully autonomous CI/CD pipelines which facilitate cloud deployments which includes automation of all infrastructure, services and application build and deployment
• Ensures that all parts of the pipeline follow good software engineering practices to include automated tests and infrastructure tests
• Builds tools which reduce errors and improve our overall customer experiences
• Assists in troubleshooting of production issues and ensure pipeline and infrastructure produces clear documentation and metrics which enables Root Cause Analysis
• Develops and tests – Ansible Playbooks, Terraform Scripts, Packer Scripts and establish immutable infrastructure such that patches are an artifact of the past
• Works with Enterprise Architecture, Information Security (InfoSec), Software Delivery, and Quality Assurance to enable the organization to move to the cloud using complete automation
• Ensures compliance with risk management programs, rules and regulations, and cybersecurity practices; identifies opportunities for and supports process improvements; applies disciplined change management practices

Requirements:

• High School Diploma or GED and six (6) years of related post-secondary education and/or experience in Information Security or Information Technology
• Two (2) years of relevant DevSecOps experience
• AWS DevOps certification or Azure DevOps certification
• Experience in building / deploying cloud native applications – OpenShift, Azure Kubernetes Service (AKS)
• Experience with interfacing with secrets management solutions like Hashicorp Vault
• Familiar with implementing Chaos engineering principles in the pipeline to determine weak links and suggest solutions
• Familiar with testing tools used to facilitate automation and integration of the tools into CI/CD pipelines