Ingénieur DevOps
Enregistrez cette offre et organisez votre recherche
Créez un compte gratuit pour enregistrer des offres d'emploi, créer des alertes et revenir à cette liste depuis votre tableau de bord.
Core Responsibilities:
1. Security Integration in CI/CD Pipelines:
• Implement security measures and best practices throughout the CI/CD lifecycle.
• ALM CI/CD GITLAB Customer pipeline ; seamless integration with Alstom eco-systems (Azure) – vault
2. Infrastructure as Code (IaC) Management:
• Terraform Expertise:
Design and deploy cloud infrastructure in Azure using Terraform.
Ensure that IaC templates are secure by default, following security guidelines ; Terraform development over module structure (core module, local, input & outputs variables…)
Regularly review and audit Terraform scripts to identify misconfigurations or vulnerabilities in cloud resources.
3. Azure Cloud Security:
• Utilize Azure-native security tools like Azure Security Center, Azure Policy to monitor and enforce security policies.
• Apply Azure Role-Based Access Control (RBAC), Azure Key Vault for secrets management, and implement network security groups (NSGs) and firewalls for secure communication.
• Leverage encryption (at rest and in transit) and secure access mechanisms (e.g., multi-factor authentication, identity management with Azure Active Directory).
4. Threat Detection and Response:
• Implement logging, monitoring, and alerting mechanisms using Azure Monitor, Azure Sentinel, and Log Analytics to identify security incidents.
• Automate incident response using playbooks in Azure Logic Apps.
5. Compliance and Governance:
• Enforce compliance frameworks (e.g., CIS benchmarks, GDPR, HIPAA) using Azure Policy to ensure cloud infrastructure meets organizational and regulatory standards.
• Use Terraform to codify compliance policies and automate the application of security controls across environments.
6. Automation & Configuration Management:
• Automate tasks using Terraform modules, reusable templates, and scripts for scalable and secure cloud deployments.
7. Collaboration & Knowledge Sharing:
• Work closely with development, operations, and security teams to promote a security-first mindset.
• Provide training and create documentation on secure cloud and DevOps practices ; Digital Factory Services framework
Required Skills:
• Terraform: Deep expertise in Terraform scripting, resource management, and state handling.
• Azure Cloud: Strong understanding of Azure architecture and Azure PaaS services, security best practices, Azure DevOps, and Azure-native security tools.
• Security Tools: Experience with security scanning tools, vulnerability management, and threat modeling.
• Automation: Proficiency in scripting languages (Python, PowerShell, Bash) to automate security tasks or blueprints development (CloudBolt)
• CI/CD Tools: Familiarity with DevOps, GitLab environment, or other CI/CD tools for secure software delivery.
• Compliance: Knowledge of regulatory standards and frameworks like NIST, ISO 27001, and how to apply them in a cloud environment
Profil
Séniorité: 7 ans et plus
Localisation: Casablanca/Rabat
Type de contrat: Freelance