• Administer GitHub Enterprise: user onboarding/offboarding, groups, permissions, AuditLog. • Administer SonarQube Enterprise: project creation, user/permission management, log/db troubleshooting, version upgrades, migrations, and keeping integration tokens with GitHub SAST/DAST pipelines up to date. • Manage AWS SSO/Identity Center: Users/Groups/Permission sets, IAM policies, and audits using Terraform IaC, AWS CLI, and console. • Handle AWS account creation/deletion using AWS Account Factory. • Manage AWS Organization: billing configuration, cost reports, and support ticket resolution. • Support DataDog integrations across AWS Org, GitHub Enterprise, SonarQube Enterprise, and custom containerized applications running on AWS ECS clusters using OTLP/DDOT. • Perform regular User Access Reviews (UAR) for AWS Identity Center, GitHub Enterprise, and SonarQube Enterprise. • Manage CI/CD pipelines on SonarQube and AnthonyTravel applications (including backstage environment). • Review pull requests for every change to the IaC (Terraform) structure. • Assist with regular audits for PCI and SOX compliance, and address issues related to access/privileges and improper offboarding.

Role Description Buscamos un/a Especialista en DevSecOps apasionado/a por la automatización y la seguridad para diseñar, construir y mantener pipelines de CI/CD seguros y robustos. En este rol, serás el experto técnico que garantiza que la seguridad está integrada en cada fase del ciclo de vida del desarrollo de software, desde la planificación hasta el despliegue y la operación en AWS. Trabajarás principalmente con Azure DevOps, Terraform y el ecosistema de seguridad de AWS para crear infraestructuras seguras, resilientes y eficientes. - Diseñar y construir pipelines de CI/CD de extremo a extremo en Azure DevOps utilizando YAML, integrando la seguridad como un pilar fundamental ("Security as Code"). - Automatizar la provisión y gestión de infraestructura en AWS utilizando Terraform, creando módulos reutilizables y seguros. - Integrar herramientas de escaneo de seguridad (SAST, SCA, IaC, DAST, escaneo de contenedores) dentro de los ductos para una detección temprana de vulnerabilidades. - Fortalecer la seguridad de nuestras soluciones de contenedores en Amazon EKS, ECS y Fargate, desde el escaneo de imágenes en ECR hasta la configuración de políticas de red y RBAC, sobretodo conocimiento profundo de EKS. - Actuar como un evangelizador de la cultura DevSecOps, colaborando estrechamente con los equipos de desarrollo y operaciones para fomentar las mejores prácticas de seguridad. Qualifications - Experiencia demostrable en un rol de DevOps, Seguridad Cloud o DevSecOps. - Dominio de Azure DevOps: Creación de pipelines complejos con YAML, gestión de agentes, conexiones de servicios y Azure Repos. - Experiencia avanzada con Terraform: Escritura de código IaC, creación de módulos, gestión de estado remoto y escaneo de seguridad con herramientas como sonarqube o veracode. - Conocimiento profundo de AWS: Especialmente en servicios de seguridad y Amazon EKS/ECS/Fargate. - Experiencia práctica integrando herramientas de seguridad en pipelines de CI/CD (ej. Snyk, SonarQube, Trivy, etc.). - Buenas habilidades de scripting (Bash, Python). Requirements - Certificaciones relevantes como AWS Certified Security - Specialty, AWS Certified DevOps Engineer - Professional, o Azure DevOps Engineer Expert - no es indispensable.

• Own the day-to-day operation of our production infrastructure • Trace issues when something goes down and see the problem through to resolution • Build shared, self-service tooling that lifts every team • Set technical direction: standards, defaults, and platform choices for infrastructure • Run monitoring (VictoriaMetrics, Jaeger, Grafana) and build alerts • Manage datastores (PostgreSQL, MySQL, MongoDB, Elasticsearch, Kafka, Redis, Memcache) • Manage infrastructure as code (Opentofu, Ansible, ArgoCD, Helm) and keep delivery fast and safe through CI/CD (GitHub Actions, GitLab CI, CircleCI)

Role Description We are seeking an experienced OIC Cloud Engineer to architect, deploy, and operate large-scale, secure, and resilient cloud environments on Oracle’s next-generation public cloud. In this role you will own the full OCI engineering lifecycle, from landing-zone design and infrastructure-as-code, through workload migration and ongoing operations, including cost optimization and observability. The ideal candidate will combine deep technical knowledge of OCI services with strong DevOps and automation fundamentals, and will partner with database, application, and security teams to deliver well-engineered cloud platforms that support mission-critical Oracle and non-Oracle workloads. Key Responsibilities - Architect, deploy, and operate enterprise-grade OCI landing zones, compartments, and tenancy structures aligned with internal governance and compliance standards. - Design and implement OCI networking topologies, including VCNs, subnets, gateways, FastConnect, IPSec VPN, and DRG-based hub-and-spoke architectures. - Build and maintain OCI infrastructure-as-code using Terraform and OCI Resource Manager, with version control, peer review, and automated validation. - Implement IAM policies, federation with corporate identity providers, and strong RBAC patterns using OCI Identity Domains. - Design and operate OCI compute (VMs, bare-metal, OKE for Kubernetes) and storage services (Object, Block, File, Archive) optimized for workload patterns. - Operate OCI database services, including Autonomous Database, Exadata Cloud, MySQL HeatWave, and Base Database, in close partnership with DBA teams. - Build CI/CD pipelines on OCI DevOps service or external platforms (Jenkins, GitHub Actions) for both infrastructure and applications. - Implement observability using OCI Monitoring, Logging, APM, and integrations with third-party observability stacks. - Drive ongoing cost optimization through right-sizing, lifecycle management, and architectural simplification. - Design disaster-recovery and business-continuity solutions across OCI regions and availability domains. - Strengthen security posture using OCI Cloud Guard, Security Zones, Vault, and Data Safe, and lead remediation of findings. - Advise application development teams on OCI-native design patterns and best practices. - Develop automation tooling in Python, Bash, and Terraform to reduce operational toil. - Mentor junior engineers and contribute to internal cloud communities of practice. Qualifications - Bachelor’s degree in Computer Science, Engineering, or a related technical discipline. - Five or more years of cloud engineering experience, with strong hands-on time on OCI. - Production-level experience with infrastructure-as-code using Terraform. - Solid experience with OCI compute, networking, storage, identity, and database services. - Hands-on experience with Oracle Container Engine for Kubernetes (OKE). - Experience with CI/CD pipelines for cloud workloads. - Strong scripting skills in Python and Bash. - Deep understanding of cloud security, IAM, and compliance requirements. - Experience with observability tooling and incident response. - Excellent troubleshooting, communication, and documentation skills. Preferred Qualifications - Oracle Cloud Infrastructure Architect Professional certification. - Experience operating Oracle Exadata Cloud or Autonomous Database at scale. - Exposure to multi-cloud architectures spanning OCI and AWS/Azure/GCP. - Familiarity with FinOps practices on OCI. - Experience operating regulated workloads on OCI. How to Apply Would you like to know more about this opportunity? For immediate consideration, please send your resume to [email protected] or contact us at (908) 676-4399. Learn more about Bright Vision Technologies at www.bvteck.com .