Lead DevSecOps Engineer

The Lead DevSecOps Engineer at NobleAI plays a critical role in designing, building, and maintaining scalable and resilient infrastructure for our VIP SaaS Platform. You will focus on implementing data storage solutions using cloud technologies, managing security compliance (SOC2 and ISO 27001), and configuring CI/CD pipelines for efficient software deployment. Collaboration with software engineers and data scientists is essential to support feature development and troubleshoot any infrastructure issues.

To qualify for the Lead DevSecOps Engineer position at NobleAI, candidates must possess a BSc Degree in Computer Science or a related field, along with a minimum of 10 years of experience in DevOps and Security for enterprise software. Additionally, at least 5 years of experience with cloud platforms and container orchestration tools, such as Kubernetes, is required. Proficiency in building data pipelines and familiarity with various databases are also critical for success in this role.

At NobleAI, the work environment is collaborative and innovative. As a Lead DevSecOps Engineer, you can expect to be part of a team that values thoughtfulness, respect, and excellence. You will be interacting with diverse teams, sharing ideas, and mentoring junior staff, while also having the autonomy to propose solutions that help drive the company's mission of utilizing AI for sustainable practices.

A successful Lead DevSecOps Engineer at NobleAI should be proficient in cloud technologies such as AWS, Azure, and GCP. Familiarity with containerization and orchestration tools like Docker and Kubernetes is also essential. In addition, you should have experience with various databases and platforms, including Postgres and Snowflake, to effectively build data pipelines that support analytics models.

NobleAI provides an attractive benefits package for the Lead DevSecOps Engineer role, including comprehensive health coverage (medical, dental, and vision), retirement fund contributions, and generous paid time off. Performance-based bonuses and stock options are also part of the package, reflecting our commitment to attracting and retaining top talent.

When building scalable infrastructure, I focus on designing architectures that can handle growth, utilizing cloud platforms effectively. I prioritize automation through CI/CD practices, and I ensure that monitoring and observability are integral to the deployment process to quickly identify performance issues.

I have extensive experience working with security compliance frameworks such as SOC2 and ISO 27001. My approach involves implementing security controls that meet the requirements, automating processes when possible, and continuously monitoring compliance through best practices and audits.

Managing CI/CD pipelines involves several best practices, including keeping the pipeline configurations version-controlled, ensuring that builds are consistent across environments, and leveraging automated testing and deployment strategies to minimize human errors. Regularly reviewing and optimizing the pipeline for efficiency is also key.

In a previous role, we encountered a performance bottleneck in our production environment. I conducted a thorough analysis of the infrastructure and identified resource constraints. After optimizing the deployment configuration, adjusting load balancers, and enhancing our monitoring tools, we successfully improved performance without downtime.

Mentoring junior members involves providing guidance on best practices, reviewing their work, and encouraging them to ask questions. I find it valuable to conduct hands-on sessions where we can work on real projects together to help them understand the concepts and applications of DevSecOps in a practical way.

I am proficient in using Docker for creating and managing containers, and I utilize Kubernetes for orchestration. This combination allows me to efficiently manage containerized applications at scale, deploying and maintaining them seamlessly across multiple environments.

To stay updated, I regularly attend tech meetups, webinars, and conferences. I also follow industry leaders and read relevant publications and blogs. Continuous learning is essential, and I prioritize obtaining new certifications that align with emerging technologies.

I have worked extensively with cloud-based databases like Postgres and Snowflake. My experience includes setting up, scaling, and optimizing database performance while ensuring their security and availability in a cloud environment. I also have experience in designing and maintaining data pipelines for analytical purposes.

I adapt my communication style based on the audience. For technical stakeholders, I delve into specifics, using industry terminology, while for non-technical stakeholders, I focus on high-level concepts and outcomes, ensuring that they comprehend the implications of technical decisions.

To prioritize effectively, I assess project deadlines, resource availability, and impact on stakeholders. I utilize project management tools to track tasks, set clear expectations, and focus on high-impact items, adjusting priorities as necessary based on project developments.