Sr. DevSecOps Engineer - AWS

Overview

ArcGIS Online is a secure mapping and spatial analysis software as a service (SaaS) platform that empowers organizations around the world to unlock geospatial insights. Customers can collect and manage data, analyze it, and improve decision-making by easily sharing maps and apps. Esri makes GIS accessible and powerful for both consumers and experts, across all platforms and devices. DevOps Security Engineers are responsible for ensuring the platform is designed and implemented with the highest security standards using Security DevOps principles. Our team automates components to implement Amazon Web Services (AWS) security at scale. We foster a collaborative environment with support and mentoring from engineering peers. We are dedicated to continually expanding the boundaries of web GIS, and you can play a key role in our mission.

Responsibilities

• Work closely with product and platform teams to engineer and implement cloud security controls
• Design and implement AWS cloud based DevSecOps processes and tools
• Deploy security solutions for infrastructure automation and cloud delivery processes
• Develop security and compliance tools in support of DevOps processes in AWS
• Stay current on security industry trends to implement best practices
• Monitor and respond to published security vulnerabilities

Requirements

• 2+ years of software development or DevOps engineer experience, especially in a security environment
• Experience in AWS security services like: AWS Security Hub, AWS Firewall Manager, AWS Guard Duty, AWS Shield, AWS Config, AWS WAF, AWS Inspector, AWS CloudFront
• Experience in Identity and Access Management services, RBAC controls, SSO
• Experience with security operations, incident analysis, incident handling, vulnerability management or testing, log analysis, and forensics
• Experience with development, deployment, and automation of security solutions in an enterprise cloud-based environment
• Bachelor’s in computer science, engineering, or related technology field

Recommended Qualifications

• Knowledge of FedRAMP, ISO 27001, GDPR, or similar compliance framework
• Experience in maintaining security in CI/CD processes in the DevOps space
• Strong AWS cloud experience in a security context
• Cloud certification and security certifications such as CISSP and SSCP
• Experience implementing real-time security monitoring solutions
• Solid understanding of Cloud infrastructure including networking, access control, IaaS, SIEM tools

#LI-DK1

#LI-Remote

Total Rewards

Esri’s competitive total rewards strategy includes industry-leading health and welfare benefits: medical, dental, vision, basic and supplemental life insurance for employees (and their families), 401(k) and …