DevSecOps Engineer / Site Reliability Engineer

As a DevSecOps Engineer at Lastwall, you will be focused on the continuous improvement and operation of the organization's AWS GovCloud infrastructure, ensuring compliance with standards like DISA SRG IL4 and FedRAMP-Moderate. Your role includes implementing automation, maintaining infrastructure tooling, and providing on-call support while advocating best practices in security and operational reliability.

To qualify for the DevSecOps Engineer position at Lastwall, you need a Bachelor's Degree in Computer Science or equivalent experience, with a minimum of five years in the industry. Proficiency in coding, particularly in Node/Typescript, and experience with tools like Terraform, IAM, and container orchestration technologies is essential.

Yes, experience with compliance frameworks, specifically FedRAMP and NIST-800-53, is crucial for the DevSecOps Engineer role at Lastwall due to the strict compliance environment they operate within. Familiarity with AWS GovCloud deployment processes is also highly beneficial.

In the DevSecOps Engineer role at Lastwall, you will utilize various development and operational tools including Terraform for Infrastructure-as-Code, container orchestration platforms like ECS and Kubernetes, GitLab for version control, and observability tools like Amazon OpenSearch and CloudWatch to monitor system performance.

At Lastwall, you can expect a collaborative and innovative workplace culture that values growth and continuous improvement. As a startup, Lastwall encourages team members to be vocal and engaged, influencing operational decisions while maintaining a strong focus on security and reliability.

In interviews, you should highlight specific projects where you've implemented Infrastructure-as-Code, such as using Terraform or AWS CDK, to deploy and manage infrastructure environments efficiently and securely.

Discuss strategies like implementing least privilege access, using security scanning tools, and developing automated security compliance checks to integrate security practices within everyday operational tasks.

You could mention tools you've used for CI/CD pipelines, like Jenkins or GitLab CI, as well as configuration management tools. Explain how these tools improved workflows and reduced deployment times.

Focus on a specific issue, such as downtime or security vulnerabilities, and underline your problem-solving skills by detailing the steps you took to mitigate the problem efficiently.

You should mention Node.js and TypeScript, emphasizing how you've used them for automation, scripting, or building tools that improve development processes.

Discuss methods such as agile planning or prioritizing tasks based on impact and urgency, showcasing your ability to manage multiple priorities efficiently.

Provide an overview of FedRAMP requirements, mentioning the importance of adherence to security standards in cloud services and how you ensure compliance in your work.

Detail your approach to setting up observability tools, like CloudWatch or OpenSearch, to gain insights into system health and promptly respond to incidents.

Share any past instances where you participated in on-call rotations, explaining how you prepared for and managed incidents to ensure minimal downtime during critical events.

Talk about how you encourage open dialogue and knowledge sharing between development and operations teams, using tools like Slack or team meetings to keep everyone aligned on goals and practices.