Sr. AWS SecOps Engineer

CEF Solutions Inc. is a Consulting Services and Business Process Outsourcing (BPO) company specialized in providing BPO Operations, Operations Management, Process Engineering and Innovation, and Cost Optimization solutions to clients in the Customer Service industry. We service some of the largest multinational companies in the world and are expanding quickly by delivering an unmatched end-to-end client experience.

Company website:

JOB DESCRIPTION:

As a SecOps Engineer, you will be responsible for ensuring the security of our systems and infrastructure. You will work closely with our development and DevOps teams to identify and remediate vulnerabilities, implement security best practices, and automate security processes. You will conduct security assessments of our systems and infrastructure to identify vulnerabilities and risks and identify risk owners and implement mitigating controls.

The SecOps engineer will build and run high-quality, secure, and non-impactful deployments for our platform. We do continuous integration and deployment to development and test environments, as well as multiple production releases per day. This is a highly technical position that requires a broad set of cloud security skills, including deployment technologies, monitoring, scripting, networking, and infrastructure.

ROLE AND RESPONSIBILITIES:

1. Work directly with our clients as an AWS Cloud SecOps Engineer.
2. Improve and remediate security in existing AWS accounts, infrastructure, and resources based on corporate security standards and AWS security best practices.
3. Experience with remediating security in IAM, S3, Security Groups, NACL, IGW, NFW, VPC, Endpoints and other AWS resources.
4. Expertise in writing JSON IAM and S3 policies – deep understanding of AWS policy language.
5. Experience in AWS account security auditing.
6. Experience in scripting using AWS APIs (boto3 or AWS CLI).
7. Understanding of TCP/IP networking principles.
8. Develop and maintain secure and reliable cloud infrastructure (OS security patching, secure backups, monitoring, secure logging, and IAM user account creation).
9. Support or modify underlying AWS infrastructure and services for security hardening.
10. Familiarity with cloud deployment automation, as well as CI/CD pipeline builds to support cloud-based workloads.
11. Provide experience, knowledge and develop competency on Terraform, Ansible and Cloud native automation tools.
12. Stay on top of the latest AWS security trends and develop expertise in emerging cloud security technologies.
13. Develop and maintain technical documentation in Atlassian Confluence.
14. Excellent experience using Atlassian Jira ticketing and Jira project management.
15. Troubleshoot technical security issues.

QUALIFICATIONS:

1. AWS Security-Specialty certification with minimum 3 years practical experience securing AWS environments.
2. Master’s or Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering or related technical field, and two years of experience in related software or systems.
3. 8+ years overall industry experience.

PREFERRED QUALIFICATIONS:

1. DevOps: automation experience on Amazon AWS.
2. Cloud: Amazon AWS, AWS Marketplace, PaaS, IaaS, SaaS.
3. Platforms and tools: Bash, python or other scripting languages.
4. DevOps/Automation: Terraform, Ansible.
5. Experience with networking and compute infrastructure such as servers, database, firewalls and load balancers.
6. Experience with current information security practices and procedures.
7. Cloud Solutions Architect-Associate level or above and AWS Security Specialty certifications.
8. Hands-on experience with Jira and Confluence.
9. Excellent interpersonal and organizational skills.
10. Excellent oral and written communication skills.

OTHER QUALIFICATIONS:

1. Legally authorized to work in the U.S. without any restrictions.
2. Okay to work 100% on-site in Mountain View, CA.