Supply Wisdom

Site Reliability Engineer

• Design and implement secure AWS architectures using EC2, S3, IAM, VPC, CloudTrail, GuardDuty, Security Hub, and KMS.
• Design and enforce least privilege access, network segmentation, and secure connectivity models (Transit Gateway, VPC Peering, PrivateLink).
• Integrate security tools and checks into CI/CD pipelines (e.g., GitHub Actions, GitLab CI, Jenkins) to enforce secure code and deployment practices; integrate SAST, DAST, SCA, and IaC scanning into pipelines.
• Enforce secrets detection, artifact signing, and SBOM generation in build workflows.
• Develop and maintain secure IaC templates using Terraform or AWS CloudFormation.
• Secure Docker and Kubernetes workloads running on AWS (EKS), including image scanning, runtime protection, and RBAC policies.
• Set up and manage AWS-native monitoring tools (CloudWatch, CloudTrail) and integrate with third-party solutions like Datadog or ELK for security observability.
• Automate vulnerability scanning and remediation across cloud resources and application layers; build custom tooling/scripts for proactive detection and response.
• Ensure AWS environments meet compliance standards such as SOC 2, ISO 27001, and GDPR; implement automated guardrails and policy enforcement using AWS Config and SCPs; deliver audit-ready evidence dashboards.
• Build custom scripts and tools to automate security tasks, alerts, and reporting; develop incident response automation (Lambda/Step Functions auto-remediation).
• Work closely with development, operations, and security teams to promote a DevSecOps culture; mentor junior engineers and conduct security training sessions.

Senior DevSecOps Engineer