ORAEX CLOUD CONSULTING

DevOps Engineer

• Develop, maintain, and enhance infrastructure automation using Terraform.
• Create and manage playbooks, roles, and automation routines with Ansible.
• Standardize provisioning and configuration of servers, cloud environments, and workloads.
• Implement and continuously improve CI/CD pipelines.
• Ensure versioning, traceability, and reuse of infrastructure code.
• Support technical teams in adopting automation, DevOps best practices, and governance.
• Troubleshoot automated environments, pipelines, and provisioned resources.
• Contribute to security, compliance, and change-control practices in production and non-production environments.
• Document processes, architectures, and automation workflows.

DevOps Analyst, IaC

Backend Engineer

• Serve as a technical security lead for platform security, focusing on internal APIs and authentication solutions.
• Develop, maintain, and evolve tools, libraries, and APIs in Ruby to integrate security controls directly into platform services.
• Design and implement robust API security mechanisms, ensuring proper application of OAuth 2.0, OpenID Connect (OIDC), JWT, and least-privilege practices.
• Define and implement API security controls, including authentication, authorization, rate limiting, input validation, and protection of data in transit and at rest.
• Integrate SAST, DAST, and SCA practices and tools into the CI/CD pipeline, ensuring code and artifacts meet security standards.
• Conduct security code reviews, especially for Ruby services, and actively participate in defining secure architectures.
• Support the incident response team in investigating and remediating application and platform vulnerabilities.
• Act as a technical partner to Platform and Product teams, providing security best-practice guidance and enabling developers.
• Create and maintain technical documentation, playbooks, and security engineering standards for internal and external consumption.

Senior Platform Security Engineer – Ruby, API Security, Authentication

Security Engineer

• Work on governance and compliance projects related to the PCI DSS standard, with a focus on internal audits (ISA).
• Lead and/or support security assessments based on frameworks such as ISO 27001, SOX, and internal regulatory requirements.
• Collaborate with internal and external teams to ensure adherence to standards and information security best practices.

DevOps Analyst, IaC

Senior Platform Security Engineer – Ruby, API Security, Authentication

Information Security Analyst – PCI Governance