SummaryDescription
Purpose of Role:As a ML/DevOps Engineer specializing in cyber security, you will be responsible for architecting, automating, and maintaining secure CI/CD pipelines and cloud infrastructure. You will act as a subject-matter expert on secureML/DevOps (DevSecOps) practices, ensuring infrastructure resilience, compliance, and rapid delivery of high-quality software.
Essential Responsibilities: - Design & Automate: Build and manage scalable, secure CI/CD pipelines (e.g., GitHub Actions, Jenkins, GitLab CI) and infrastructure-as-code (Terraform, CloudFormation, Ansible).
- Secure Cloud Infrastructure: Implement and maintain security controls across AWS (or Azure/GCP) environments, including IAM, network segmentation, and encryption in transit/at rest.
- AI/ML Tooling: Familiarity with model servers, vector databases, GPU monitoring (DCGM), and agent orchestration
- Container & Orchestration Security: Harden Docker images, manage Kubernetes security policies, and integrate container-scanning tools.
- Continuous Monitoring: Deploy observability solutions to track system health, performance, and security posture; respond to alerts and conduct root-cause analysis.
- Threat Modeling & Risk Assessment: Evaluate infrastructure changes for potential vulnerabilities and recommend mitigation measures.
- Compliance & Governance: Align infrastructure and processes with SOC 2, ISO 27001, HIPAA, and other relevant standards; generate required evidence for audits. Handle model registries (MLflow, HuggingFace/NGC mirrors), vulnerability scanning supply-chain hygiene, and role-based access for AI coding tools or agentic wrappers
- Incident Response: Partner with security and engineering teams on incident detection, triage, and post-mortem analysis.
- Collaboration & Enablement: Coach development teams on secure coding and deployment practices; advocate for DevSecOps culture across the organization.
- Continuous Improvement: Stay current with emerging DevOps and security trends, recommending and implementing tool and process enhancements.
Knowledge, Skills and Abilities:- Bachelor's degree in Computer Science, Information Technology, or related field.
- 5+ years in DevOps, Site Reliability Engineering, or Cloud Engineering with demonstrable security responsibilities.
- Hands-on experience with at least one major cloud platform (AWS preferred).
- Proficiency in infrastructure-as-code tools (Terraform, CloudFormation) and CI/CD platforms.
- Strong scripting skills (Python, Bash, or Go) for automation.
- Deep understanding of networking, containerization (Docker), and orchestration (Kubernetes/EKS).
- Experience with vulnerability scanning, secrets management, and identity & access management.
- Familiarity with log aggregation, metrics, and alerting stacks (e.g., ELK, Prometheus, Grafana).
- Excellent analytical, problem-solving, and communication skills; ability to work independently and collaboratively.
Preferred- Certifications such as AWS Certified DevOps Engineer, CKA, or CISSP.
- Experience with security platforms (Aqua, Prisma Cloud, Snyk, or similar).
- Knowledge of zero-trust architectures and secure SDLC frameworks.
- Familiarity with compliance frameworks in regulated industries (healthcare, finance).
- Experience with infrastructure cost-optimization and FinOps practices.
Relevant Working Conditions/Physical Demands:- Sitting/Stationary: Often requires sitting at a desk and looking at a computer screen for 70% - 90% of the workday.
- Fine Finger Dexterity: High use of keyboards, computer mice, and standard office equipment.
- Lifting/Moving: Minimal physical exertion; occasionally required to lift or carry office supplies, files, or packages weighing up to 30 lbs.
- Mobility: Intermittent standing, walking, and bending or stooping to retrieve files.
