Job Description
Principal DevOps Engineer
JOB SUMMARY
The mission of the individual in this role is to leverage their strong understanding of enterprise-level knowledge and/or expert knowledge to mitigate cyber security risk. They will actively work with the CBRE business, Digital & Technology and other partner organizations (Compliance, Risk Mgmt., Audit, & Legal) to seamlessly integrate security processes, tools, and people into the business culture providing a holistic security ecosystem, driving continuous improvements and seamless protection / monitoring capabilities globally. Leads and executes on complex initiatives that drive problem resolution. As a senior member on the team, this individual will work to build a progressive development team with a mindset toward being agile and solving problems iteratively.
Experience in all skills listed is not necessary to be qualified for the position. If you have relevant similar experience, we still want to talk to you.
ESSENTIAL DUTIES AND RESPONSIBILITIES:
- Ensuring operational integrity of Global Cyber-Security Office DevSecOps applications and infrastructure; including:
- HashiCorp Vault
- JFrog Artifactory
- Internal Security Pipeline
- Third party vendor applications
- AWS EKS Kubernetes cluster administration, and troubleshooting
- Managing global multi-region cluster failover, and disaster recovery plans
- Capable of triaging, debugging and root cause analysis of various commonly used AWS services such as IAM, KMS, EC2, EKS, S3, Route53, CloudFront, ACM, Secrets Manager
- Building automation and governance around organization secrets management
- Tracking, comparing and reporting SLOs, and SLIs against defined SLAs to ensure reliability and availablity
- Bespoke automation and integrations for backend systems using languages such as Bash, Python, Ruby, and Go
- Automating the collection of metrics from DevSecOps tools and implementing AppSec log ingestion at scale using tools such as Sysdig, DataDog and Prometheus
- On-call rotation for ensuring uptime, and functionality of critical internal customer services
- Have well founded opinions and be willing to express your disagreement when something doesn't pass the smell test for you.
- Other duties as assigned
SUPERVISORY RESPONSIBILITIES
- Lead members of a globally present DevOps team.Shape the direction of the team moving forward. Provides formal supervision to individual employees within single functional or operational area. Recommends staff recruitment, selection, corrective action and termination. Prepares and delivers performance appraisal for staff. Mentors and coaches team members to further develop competencies. Leads by example and models behaviors that are consistent with the company's values.
EDUCATION and EXPERIENCE:
- Bachelor's degree (BA/BS) in a related field of work
- plus a minimum of 3 years related work experience; or equivalent combination of education and experience (equivalent work experience = 2 years’ of related experience for every year of higher level education).
- Advanced experience administering Kubernetes, and understanding of manifest management with Helm
- Advanced experience solutioning with AWS services such as IAM, KMS, EC2, EKS, S3, Route53, CloudFront, ACM, Secrets
- Intermediate experience solutioning and working with one or more other cloud providers aside from AWS such as GCP, Alibaba, Azure
- Intermediate experience writing, and running Terraform
- Advanced of Linux systems administrator experience or equivalent skills
- Intermediate experience or equivalent skills with DevOps or CICD pipelines (Jenkins, Concourse, etc)
- Intermediate experience with configuration management tools such as Chef, Ansible, SaltStack.
- Strong preference for Chef
- Advanced experience with automating multiple systems using languages such as Bash, Python and Ruby and Go
- Intermediate experience with RDBMS databases such as Postgres, MySQL, and MS SQL Server
- Intermediate understanding of source control management and practices using Git, and Github
- Advanced understanding of Infrastructure as Code
OTHER SKILLS and/or ABILITIES
- Experience with the Microsoft ecosystem including Powershell is a plus
- Directory services like AD, and LDAP
- Understanding and experience with backend software application development with Ruby or Go including API development, and integrating with third party sources
- Understanding of system integration design patterns at scale with experience in microservice design or development
COMMUNICATION SKILLS
Ability to comprehend, analyze, and interpret the most complex business documents. Ability to respond effectively to the most sensitive issues. Ability to write reports, manuals, speeches and articles using distinctive style. Ability to make effective and persuasive presentations on complex topics to employees, clients, top management and/or public groups. Ability to motivate and negotiate effectively with key employees, top management, and client groups to take desired action.
REASONING ABILITY
Ability to solve advanced problems and deal with a variety of options in complex situations. Requires expert level analytical and quantitative skills with proven experience in developing strategic solutions for a growing matrix-based multi-industry sales environment. Draws upon the analysis of others and makes recommendations that have a direct impact on the company.