Expert DevSecOps Cloud AWS

Project overview

Context

The service concerns the activities necessary for a DevOps approach within a company in the land transport auxiliary services sector and the improvement of the CI/CD factory in their Delivery chain. The team in charge of these activities works in close collaboration with the IT security teams (missions in Lot 3), development teams (missions in Lots 1 and 5), and operations teams (missions in Lot 2) on the implementation of this chain. The team also works on setting up certain hosting infrastructures for new projects, connecting the software factory and CI/CD tools that have been implemented.

Missions

Expected Profile

Specific Skills

Optional Skills Appreciated

Transversal Skills

• Industrialize the deployment and management of cloud infrastructures via Infrastructure as Code and CI/CD pipelines
• Ensure the reliability, security, and observability of production platforms (Day-2 Ops, automation)
• Drive cost management (FinOps) and the integration of hybrid architectures (on-prem and AWS)
• Provide advice on architectural design best practices for multiple AWS cloud applications and company projects
• Evaluate cloud application needs and formulate architectural recommendations for the implementation, deployment, and provisioning of applications on AWS
• Contribute to reducing application solution delivery cycles through automation
• Contribute to the continuous improvement of the software factory (CI/CD)
• Conduct and present studies and Proofs of Concept (PoC)
• Implement the DevSecOps approach
• Secure platforms in the cloud
• Collaborate on projects: advice, provision of necessary elements to project managers, participation and contribution to project meetings
• Collaborate on projects involving complex architecture, decoupled systems, interactions between services managed by different stakeholders
• Write Operational Documentation (DEX)
• Contribute to securing application delivery cycles
• Activity reporting (weekly and monthly frequencies)
• 5 to 10 years of experience in similar activities
• Significant experience in securing and evolving automated DevSecOps pipelines
• Experience in implementing the DevSecOps approach
• Significant experience with WAF, SAST, DAST, IAST & RASP tools (EDR, XDR, Sonar, Snyk etc.)
• Significant experience in IaC development (Terraform)
• Significant experience in cybersecurity within a cloud platform (AWS)
• Familiar with Agile Scrum and Kanban methodologies
• Production of indicators to measure the security of the IT system and application delivery
• Knowledge of cybersecurity concepts (AppSec, DevSecOps, best practices etc.)
• Administration of Kubernetes clusters
• Technological watch in cybersecurity (CVE, cyberattack campaigns etc.)
• Development of scripts in Python and Bash
• Development of infrastructure code using Terraform, CloudFormation etc.
• Monitoring of SOC activity
• Knowledge of penetration testing
• Project management
• Experience in the land transport auxiliary services sector or a public land transport operator
• Knowledge of a web development language (PHP or Java or HTML+Javascript)
• Knowledge of load testing (Jmeter, Gatling, Selenium etc.)
• Good interpersonal skills
• Vision and analytical skills
• Rigor and method
• Good written and oral communication
• Autonomy, curiosity, and proactivity
• Team spirit

Project details

• Start: flexible
• Remote: hybrid
• Location: Paris, France, FR
• Rate: 73-73 EUR/h
• Languages: French