Job Description: DevOps & Security Engineer

About Mensa Technology Platform

Key Responsibilities

DevOps & Platform Engineering

• Design, implement, and manage scalable cloud infrastructure across AWS, Azure, and GCP environments.
• Build and maintain CI/CD pipelines using GitHub Actions, GitLab CI, and Jenkins.
• Manage containerized workloads using Docker and Kubernetes.
• Implement Infrastructure as Code using Terraform and CloudFormation.
• Improve platform reliability, scalability, deployment velocity, and operational efficiency.
• Setup monitoring, logging, alerting, and observability frameworks for infrastructure and applications.

Security Engineering & DevSecOps

• Implement Shift Left Security practices by integrating automated security testing into CI/CD pipelines.
• Configure and manage SAST, DAST, dependency scanning, and container security scanning tools.
• Design and enforce least privilege Identity and Access Management policies.
• Manage secrets, encryption keys, certificates, and secure authentication systems.
• Ensure Kubernetes workloads follow security best practices including Pod Security Standards and network policies.
• Implement and manage cloud security tools such as:
  • AWS Security Hub, KMS, IAM Identity Center
  • Microsoft Defender for Cloud, Azure Key Vault
  • Google Cloud security services
• Identify vulnerabilities, security gaps, and potential attack vectors proactively.
• Setup incident response workflows, security monitoring, and automated remediation processes.

Governance, Compliance & Operations

• Define and enforce data governance processes and security policies across the organization.
• Drive compliance initiatives related to ITGC, audit readiness, and security standards.
• Ensure infrastructure and systems comply with internal security baselines and regulatory requirements.
• Collaborate with Engineering, Data, DevOps, and Security teams to ensure seamless operations.
• Promote cybersecurity awareness and secure engineering practices across teams.

Desired Skills and Experience

• 4 to 10 years of experience in DevOps, Platform Engineering, Security Engineering, or DevSecOps roles.
• Strong hands on experience with AWS cloud services. Exposure to Azure and GCP is preferred.
• Expertise in Kubernetes, Docker, and container orchestration security.
• Strong experience with Terraform, CloudFormation, or similar IaC frameworks.
• Experience implementing CI/CD pipelines using GitHub Actions, GitLab CI, or Jenkins.
• Strong understanding of IAM, secrets management, RBAC, encryption, and authentication systems.
• Hands on experience with vulnerability management and security scanning tools.
• Good understanding of ITGC controls, audit processes, and compliance frameworks.
• Experience with logging, monitoring, SIEM, and incident response systems.
• Strong scripting or programming skills in Python, Bash, PowerShell, Java, or JavaScript.
• Familiarity with service mesh technologies such as Istio is a plus.
• Strong problem solving, automation, and debugging skills.
• Excellent communication and collaboration skills with cross functional teams.

Why Join Us