Senior DevSecOps Engineer – Logistics

1. Infrastructure Management

• Architect, deploy, and maintain highly available, scalable, and secure AWS

environments for logistics SaaS applications.

• Implement Infrastructure as Code (IaC) using tools like AWS CloudFormation,

Terraform, or CDK.

• Manage and optimize VPCs, subnets, security groups, EC2, S3, RDS (PostgreSQL),

and ElasticSearch clusters.

• Design multi-environment infrastructure (dev, staging, prod) with proper isolation,

monitoring, and cost optimization.

2. CI/CD and Automation

• Build and maintain CI/CD pipelines for application and infrastructure deployments using

tools like Jenkins, GitHub Actions, CircleCI, or AWS CodePipeline.

• Standardize deployment processes across backend, frontend, and microservices.

• Integrate testing and security validation into pipelines (static code analysis, dependency

scanning, secret detection).

• Ensure zero-downtime deployments and support frequent release cycles in agile

development environments.

3. Containerization and Orchestration

• Design and manage containerized applications using Docker, Kubernetes, AWS ECS,

and EKS.

• Set up autoscaling policies, resource quotas, and health checks for high availability.

• Manage container image scanning and secure image registries.

4. Monitoring, Logging & Observability

• Implement and maintain monitoring systems (Prometheus, Grafana, CloudWatch,

Telegraf, InfluxDB).

• Configure centralized logging (Elastic Stack/EFK, Graylog, Loki) and APM tools (New

Relic, Datadog, or Sentry).

• Establish alerting rules for system health, latency, and security events.

• Provide actionable visibility into production performance and reliability metrics.

5. Security

• Integrate security practices into DevOps pipelines.

• Conduct regular vulnerability assessments and patch management across

environments.

• Implement identity and access management (IAM) best practices — least privilege,

role-based access, MFA enforcement.

• Ensure compliance with security frameworks (OWASP, ISO 27001, SOC 2).

• Protect data integrity and privacy for sensitive logistics and customer data.

• Support incident response and post-mortem analysis.

6. Cost Management & Optimization

• Continuously monitor and analyze AWS usage, identifying opportunities for cost

reduction and efficiency gains.

• Implement autoscaling, rightsizing, and lifecycle policies for EC2, RDS, S3, and

Kubernetes clusters.

• Use AWS Cost Explorer, Budgets, and CloudWatch Metrics to track and forecast

spend.

• Define and enforce tagging strategies for cost visibility by environment, team, or

project.

• Optimize data storage and retention across logs, snapshots, and backups to reduce

overhead.

• Collaborate with engineering and product teams to balance cost vs performance trade-

offs.

• Produce monthly cost reports and recommendations for leadership on optimization

initiatives.

7. Database and Application Performance

• Maintain and tune PostgreSQL, Redis, Elasticsearch, or NoSQL databases for

optimal performance.

• Perform query optimization, index tuning, and replication configuration for

scalability and resilience.

• Support developers in analyzing query performance and troubleshooting production

bottlenecks.

8. Collaboration and Mentorship

• Work closely with Developers, QA/QC teams, and Product Managers to improve system

reliability.

• Mentor junior DevOps engineers on AWS, Kubernetes, and CI/CD best practices.

• Participate in sprint planning, release readiness reviews, and production deployment

planning.

Education

• Bachelor’s degree in Computer Science, Information Systems, or equivalent technical field.

Experience

• 5–6 years of hands-on DevOps or Cloud Engineering experience, preferably in SaaS, logistics, or eCommerce systems.

• At least 4+ years of experience working with AWS cloud services.

• Proven experience with infrastructure automation, CI/CD pipelines, and container orchestration.

• Hands-on experience in .NET, NodeJS, or Python environments and microservices architectures.

Technical Skills

• Deep knowledge of AWS (EC2, RDS, Lambda, ECS/EKS, S3, VPC, CloudFormation, IAM).

• Proficiency in Docker, Kubernetes, and related orchestration technologies.

• Strong understanding of networking, load balancing, and DNS routing.

• Skilled in Git, Gitflow, and branching strategies.

• Monitoring and logging experience with Prometheus, Grafana, CloudWatch, ELK/EFK, or Datadog.

• Experience securing infrastructure and applications using OWASP, CIS benchmarks, and IAM best practices.

• Knowledge of SQL/NoSQL databases, database performance tuning, and security hardening.

• Familiarity with Agile, Scrum, and continuous delivery principles.

Soft Skills

• Strong analytical and troubleshooting abilities.

• Calm and collaborative approach under pressure.

• Excellent communication skills, both technical and non-technical.

• Strong problem-solving attitude with ownership mindset.

Preferred Certifications

• AWS Certified Solutions Architect (Associate or Professional)

• CKA / CKAD (Certified Kubernetes Administrator / Developer)

• Security+ or AWS Security Specialty