DevOps Engineer Profile:
Key Responsibilities:
OCI Cloud Security: Design, implement, and manage secure cloud
infrastructure on Oracle Cloud Infrastructure (OCI). Ensure that cloud
environments adhere to security best practices and compliance
requirements.
DevOps Automation: Develop and maintain automated pipelines for
infrastructure provisioning, security scans, and deployment in OCI, using
tools like Terraform, Ansible, Jenkins, and OCI native services.
CI/CD Security Integration: Integrate security checks and controls into
CI/CD pipelines, ensuring that code and infrastructure are tested for
vulnerabilities, compliance, and security risks at every stage of the
development process.
Security Monitoring and Incident Response: Set up monitoring,
alerting, and logging solutions to detect and respond to security incidents
in OCI. Implement tools like OCI Security Zones, OCI Cloud Guard, and
third-party security solutions to continuously monitor cloud environments.
Identity and Access Management (IAM): Configure and manage IAM
policies, roles, and permissions in OCI to enforce the principle of least
privilege and ensure secure access to cloud resources.
Infrastructure as Code (IaC): Secure and manage infrastructure using
Terraform or OCI Resource Manager to implement IaC, ensuring that
security controls are embedded in the codebase.
Vulnerability Management: Conduct regular vulnerability assessments
of OCI environments, containers, and applications. Collaborate with
development and infrastructure teams to remediate identified security
vulnerabilities.
Network Security: Design and manage secure VCNs (Virtual Cloud
Networks), firewalls, VPNs, and load balancers in OCI to ensure secure
communication and data flow across cloud environments.
Collaboration and Documentation: Work closely with developers,
operations, and security teams to establish security guidelines and best
practices. Document security configurations, processes, and incident
response procedures.
Compliance and Auditing: Ensure that OCI environments meet
compliance standards such as PCI-DSS, SOC 2, GDPR, or other relevant
frameworks. Conduct regular audits and security reviews of the
infrastructure.
Required Skills and Qualifications:
Experience: 5+ years of experience in DevOps, cloud security, and
infrastructure, with a minimum of 2 years of hands-on experience with
Oracle Cloud Infrastructure (OCI).
Cloud Security Expertise: Strong understanding of cloud security
concepts and best practices, particularly within OCI. Familiarity with OCI
Security Zones, OCI Vault, and Cloud Guard.
DevOps Tools: Hands-on experience with CI/CD tools (e.g., Jenkins,
GitLab CI), infrastructure automation (Terraform, Ansible), and
monitoring/logging tools (Prometheus, Grafana, or Splunk).
Infrastructure as Code (IaC): Experience with Terraform and/or OCI
Resource Manager for deploying and managing cloud infrastructure.
Security Tools: Experience with security tools for vulnerability scanning,
compliance checks, and monitoring (e.g., Aqua Security, Twistlock, Nessus,
or Qualys).
Networking: Knowledge of cloud networking concepts, including VCN,
subnets, security lists, VPNs, and load balancers in OCI.
Container Security: Familiarity with securing containerized applications,
including Docker and Kubernetes in a cloud environment.
IAM and Compliance: Expertise in managing IAM policies, roles, and
permissions in OCI and experience with ensuring cloud environments meet
compliance frameworks such as SOC 2, PCI-DSS, and ISO 27001.
Preferred Skills:
Certifications: OCI certifications (OCI Certified Architect Professional, OCI
Cloud Operations Associate) or relevant security certifications (CISSP, CKA,
CEH, etc.).
Programming/Scripting: Knowledge of scripting languages like Python,
Bash, or PowerShell for automation purposes.
Security Automation: Experience with automating security checks and
remediation in cloud environments.
Experience with Hybrid Cloud: Knowledge of hybrid cloud security
strategies and their implementation within OCI environments.
Cloud Infrastructure Developer:
Key Responsibilities:
Design and Implement OCI Solutions: Architect, deploy, and manage
scalable and secure infrastructure on Oracle Cloud Infrastructure (OCI),
leveraging services such as compute, storage, networking, and security
tools.
Cloud Automation and Infrastructure as Code (IaC): Implement
infrastructure automation using tools like Terraform, OCI Resource
Manager, and Ansible to deploy and manage OCI resources following best
practices.
Security DevOps Integration: Integrate security controls into CI/CD
pipelines and cloud environments, ensuring infrastructure and application
security by automating vulnerability scans, compliance checks, and
remediation processes.
OCI Security Management: Configure and manage OCI Security Zones,
OCI Vault for key management, IAM policies, and Cloud Guard for proactive
monitoring of cloud environments.
Monitoring and Incident Response: Set up and manage logging,
monitoring, and alerting systems using OCI native tools and third-party
solutions to detect and respond to security and operational incidents.
Network Design and Security: Design secure Virtual Cloud Networks
(VCNs) in OCI, manage firewalls, VPNs, and load balancers, and ensure
that network traffic is securely routed across the cloud infrastructure.
Collaboration and Stakeholder Engagement: Collaborate with
development, security, and operations teams to ensure seamless
integration of infrastructure with application development and
deployment. Engage with key stakeholders to ensure cloud environments
meet business and security requirements.
Compliance and Governance: Ensure that cloud infrastructure adheres
to regulatory and compliance frameworks such as SOC 2, PCI-DSS, ISO
27001, and GDPR. Implement governance policies to enforce security and
compliance across OCI resources.
Performance Optimization: Continuously monitor and optimize cloud
infrastructure performance, cost, and security, ensuring that systems are
scalable and efficient.
Documentation and Best Practices: Create and maintain
documentation for infrastructure configurations, security practices, and
operational processes. Promote the adoption of cloud security and DevOps
best practices within the organization.
Required Skills and Qualifications:
Experience: 5+ years of experience in cloud infrastructure engineering,
with at least 2 years of hands-on experience working with Oracle Cloud
Infrastructure (OCI).
OCI Expertise: Strong understanding and experience with core OCI
services (compute, networking, storage, IAM, security services) and tools
like OCI Cloud Guard, Security Zones, and Vault.
DevOps and Automation: Proficiency with DevOps tools such as
Terraform, Jenkins, Ansible, or OCI Resource Manager for automating
infrastructure provisioning and management.
Security DevOps: Hands-on experience with integrating security best
practices into DevOps pipelines, including automated vulnerability
scanning, monitoring, and remediation.
Networking & Security: Expertise in designing secure network
architectures, including VCNs, subnets, security lists, VPNs, and load
balancers, within OCI environments.
Compliance & Governance: Experience implementing compliance and
security governance frameworks, ensuring that cloud infrastructure meets
industry standards.
Scripting & Automation: Proficiency in scripting languages like Python,
Bash, or PowerShell to automate cloud operations and security tasks.
Collaboration Skills: Strong ability to work collaboratively with cross-
functional teams and communicate effectively with both technical and
non-technical stakeholders.
