[Hiring] DevSecOps Engineer @SailPoint

Role Description

As a DevSecOps Engineer, you will be a key player on the Infrastructure and Platform Services team servicing the Identity Security Cloud platform. You will proactively work with Engineering, Product, Services, and other functional departments to implement and operate our global customer-facing SaaS infrastructure. The ideal candidate will be a self-starter who enjoys a fast-paced job, thrives on problem solving, and is committed to delivering seamless product availability to large enterprises around the world.

• Implement file integrity monitoring
• Collect and automate collection of audit evidence
• Implement and harden base images used throughout the company

Must be willing to work at least 4 overlapping hours with US time zone. Must be willing to work in an on-call rotation. This is a fully remote opportunity.

Qualifications

• Experience in 24x7 production operations, preferably supporting a highly available environment for a SaaS or cloud service provider
• Experience with cloud infrastructure environments, preferably AWS or Azure
• Experience with SIRP, SIEM, and IDS/IPS/WAF solutions
• Experience securing containerized applications and images
• Experience with file integrity monitoring (FIM)
• Release automation (Jenkins, etc), system administration, system configuration, and system debugging experience
• Experience using scripting languages (Ruby, Python, etc), configuration management tools (Chef, Puppet, etc), infrastructure as code (Terraform) and command execution frameworks
• Strong understanding of system and networking concepts and troubleshooting techniques
• Strong interpersonal and teaming skills - ability to set and enforce process and influence engineers who are not direct reports
• Ability to operate in an agile, entrepreneurial start-up environment

Requirements

• Bachelor's degree in Computer Science or other technical discipline, or equivalent experience

Roadmap for success

Within first 30 days:

• Onboard into your new role, get familiar with our product offering and technology, proactively meet peers and stakeholders, set up your test and development environment
• Begin working on projects and improvements we have planned

By 90 days:

• Collaborate on projects with team members and other teams
• Be fully integrated with the team, join the on-call rotation to support our product
• Propose projects we can do to improve work for the team and improve security for the product

By 6 months:

• Own and implement security improvement projects
• Become a subject matter expert on operational security for our products
• Independently handle any on-call incidents
• Collaborate with developers to securely bring new features and services into production
• Work with cybersecurity to meet SLAs on vulnerability and misconfiguration remediations
• Develop and improve operation practices and procedures
• Proactively meet standards for information security and compliance (such as ISO, SOC, SSAE 16, etc.)