Project Responsibilities
Operate and maintain on-premise infrastructure environments across DEV, TEST, STAGING, UAT, and PROD.
Ensure network zoning and environment segregation in line with External / DMZ / Internal architecture.
Configure and support Web Application Firewalls (WAFs) and controlled traffic flows between zones.
Operate and maintain External and Internal API Gateways.
Support enterprise integrations via the Software AG integration platform.
Operate identity and access management infrastructure, including miniOrange IdP, MFA, and OIDC integrations.
Design, maintain, and operate CI/CD pipelines using Azure DevOps, including secure release promotion.
Implement and operate Secure SDLC controls (SAST, SCA, DAST).
Implement and maintain monitoring, logging, and audit capabilities (Prometheus, Grafana, Graylog, Sentry, SIEM forwarding).
Support backup, replication, and disaster recovery activities, including DR testing.
Requirements
Must-haves
5+ years of experience in DevOps or Infrastructure Engineering.
Experience with on-premise infrastructure deployment and operations in enterprise environments.
Experience managing multiple isolated environments (DEV, TEST, STAGING, UAT, PROD).
Knowledge of network security zoning architectures (External / DMZ / Internal).
Hands-on experience working with Web Application Firewalls (WAFs).
Experience configuring and supporting External and Internal API Gateways.
Experience working with enterprise integration / ESB platforms (Software AG).
Experience integrating and operating Identity Providers (IdP) (miniOrange).
Knowledge of OIDC / OAuth2 authentication flows and Multi-Factor Authentication (MFA).
Experience with TLS / mTLS secure communication and PKI-based certificate management.
Hands-on experience with CI/CD pipelines using Azure DevOps.
Experience implementing Secure SDLC practices, including SAST, SCA, and DAST.
Knowledge of threat modeling techniques, specifically STRIDE.
Experience with monitoring and observability tools (Prometheus, Grafana).
Experience with centralized logging and application monitoring (Graylog, Sentry, SIEM integration).
Experience supporting backup, replication, and disaster recovery processes, including DR testing.