Devsecops Lead

We are looking for a DevSecOps Lead to strengthen our development service in digital transformations. The DevSecOps Lead shall support Niteco’s delivery/service teams with all aspects of automation for deployment and integrated testing, security, processes/procedures in a software development project life cycle, monitoring and infrastructure-related tasks for our global clients**.**

**JOB DESCRIPTION**:
The main responsibilities of the DevSecOps Lead include:

- Automation
- Lead the team to define CI/CD process and standardize the process for the delivery organization, while ensuring the best practices and security practices are in place.
- Ensure the setting up of the process and tool to check coding conventions/requirements and enhance coding quality is in place for different delivery teams.
- Involve in setting up the process and tool to do automated testing, integration testing, to ensure it meets the defined security requirements.
- Assist in setting up to ensure pen test and security scanning is implemented before each release.
- Infrastructure
- Work with DevOps engineers to create code/config templates/guidelines for auto-provision of multiple dev/test/prod environments.
- Involve in the process of provisioning multiple dev/test/prod environments, to ensure it meets the defined security requirements.
- Assist the development team with system architecture and infrastructure optimization.
- Identify and deploy cybersecuritymeasures by continuously performing vulnerability assessment and risk management.
- Manage & Monitor
- Lead the DevOps engineers to setup monitoring/alerting procedures/systems/dashboards, manage and monitor all installed systems and infrastructure platform.
- Define security policies and procedures to be applied at the companywide.
- Define data privacy policies and appropriate data processing procedures to be applied at the companywide.
- Create a security handbook and guidelines to guide delivery/support teams to follow.
- Plan auditing activities in terms of security requirements on different delivery/support teams and schedule to execute those.
- Provide periodic environment reviews and suggestions for enhancement of services, delivery quality, system reliability, scalability, performance, and cost-effectiveness.
- Be the manager on DevSecOps activities, and drive the team to excellency; administration of different DevOps and Security tools, and automating processes whenever possible.
- Take initiative in improving on reporting, processes, workflow and client outcomes.

**Other tasks**
- Make sure all procedures, guidelines and best practices are documented.
- Work closely with IT and Application Management Engineers to assist both internal and external clients.
- Provide assistance to the other teams in the technical meetings with major clients on issues that relate to the expertise of DevOps and Security.
- Mentoring and guiding the team members.
- Planning the team activities, and involvement in project management activities.
- Managing stakeholders and external interfaces.
- Monitoring and measuring customer experience and KPIs.
- Managing periodic reporting on the progress to the management and the customer.
- Stay on top of DevSecOps trends, experiment and learn for continuous improvement, and seek to continually improve processes companywide.

**JOB REQUIREMENTS**:

- Bachelor of IT, Computer Science, or relevant field.
- Must have a deep understanding of both development and operations processes, as well as a strong technical background.
- Good communication skills (in English and Vietnamese). Be able to consult the customer with the best possible solution.
- From 5+ years of experience in software development and operations, with at least 2 years working in DevOps and Security, and with at least 1 year working as a Manager.
- Must-have: programming experience with scripting languages (e.g., Bash, Python, Powershell, etc.)
- Must-have: Experiences in implementation and managing services: SQL Server, MySQL, Postgres, Mongo/Cosmos, Redis, Kafka
- Must-have: Knowledgeable of database queries and data security.
- Must-have: Familiar with web servers, i.e. IIS, Nginx, Apache, Tomcat, IBM WebSphere, etc.
- Must-have: Experience DevOps tools and CI/CD pipeline: TeamCity, Jenkins, Azure DevOps, Octopus Deploy.
- Having experiences with Ansible, Puppet and Terraform is a plus.
- Good in working with cloud platforms: Azure, AWS, GCP. Certification/qualification is highly regarded.
- Practical experience with Dockerized Containers, Kubernetes, Openshift, IBM Cloud-based services, IBM Bluemix.
- Good knowledge of System infrastructure (Network, Security, Services, Virtualizations).
- Must-have: Have knowledge and experience with ELK (Elasticsearch, Logstash, Kibana), Azure Application Insights, Dynatrace, RayGun, Prometheus, Grafana, Loki, Datadog, and/or equivalent systems/tool.
- The ability to work well in a team and individually.
- Strong management skills and good customer