DevSecOps / Cloud Engineer

About the Role

Tatal is currently seeking a skilled DevSecOps / Cloud Engineer to take ownership of our production infrastructure. The successful candidate will ensure that all delivered software is secure, reliable, and thoroughly monitored.

Important Note: This role is not focused on adding developers to our team. Our development processes rely extensively on AI assistance. Your primary responsibility will be to guarantee the security, proper deployment, monitoring, and readiness of our products before they reach clients.

Key Responsibilities

• Maintain and oversee production infrastructure and deployment workflows.
• Design robust and secure cloud architectures incorporating networking components such as VPCs, firewalls, and access management.
• Develop and operate CI/CD pipelines and automate deployment procedures.
• Utilize infrastructure as code methodologies, ideally with Terraform, to manage environments.
• Deploy Docker containers securely and enforce container security best practices.
• Implement strict IAM policies promoting least-privilege access principles.
• Securely handle secrets management and environment variable configurations.
• Establish comprehensive logging, monitoring, alerting mechanisms, and audit logs.
• Manage backup strategies, disaster recovery plans, and uphold production reliability standards.
• Incorporate security scanning tools into CI/CD pipelines to automate vulnerability assessments.

Essential Qualifications

• Proven hands-on expertise with major cloud providers such as AWS, GCP, or Alibaba Cloud.
• Practical experience working with Terraform or other comparable infrastructure as code tools.
• Knowledgeable about Docker containerization and corresponding security frameworks.
• Deep understanding of cloud networking architectures and Identity and Access Management systems.

Preferred Experience

• Familiarity with Cloudflare, Web Application Firewalls (WAF), and Distributed Denial of Service (DDoS) mitigation strategies.