Junior DevSecOps Engineer

Position:

• Junior DevSecOps Engineer/Junior Site Reliability Engineer
• Focus: day-to-day infrastructure operations, reliability, and baseline security for production environments.

⸻

Role Purpose

Operate and maintain production systems to ensure availability, performance, and security hygiene across:

• Linux-hosted web applications (primarily Python-based, plus supporting API/services)
• Integration services (service-based components, e.g., compiled services such as Go/Java) and workflow orchestration/scheduling
• Relational databases (e.g., MySQL/MariaDB and PostgreSQL)
• Observability tooling (dashboards, metrics, alerts, and logs—e.g., Grafana or equivalent)

This is an execution-oriented role: monitoring, incident response, routine maintenance, safe changes, and continuous operational improvement.

⸻

Key Responsibilities

1) Production Reliability & Operations

• Perform daily health checks for applications, services, and infrastructure (CPU/memory/disk/network).
• Monitor metrics and alerts; identify anomalies and take first-response actions based on runbooks.
• Troubleshoot incidents using a structured approach (symptom → scope → evidence → mitigation → escalation).
• Maintain service availability by applying safe operational actions (restart, rollback, failover steps where applicable).

2) Observability (Metrics, Logs, Alerts)

• Read and interpret dashboards (latency, throughput, error rate, saturation, DB connections, queue depth).
• Investigate issues using common log sources and system logs; collect evidence for post-incident review.
• Maintain alert hygiene: reduce noise, validate thresholds, ensure alerts map to actionable playbooks.
• Support creation/updating of operational dashboards and basic SLO/SLI tracking (where required).

3) Platform/Application Operations

• Support application runtimes and background processing:
• process/worker health, schedulers, job queues, cron/systemd services
• configuration verification and environment consistency checks
• Assist with deployments in collaboration with developers:
• pre-checks, smoke tests, rollback readiness, and post-deploy monitoring
• Perform routine maintenance: log rotation validation, cleanup tasks, certificate checks, and capacity housekeeping.

4) Database Operational Support (MySQL/MariaDB & PostgreSQL)

• Perform operational checks:
• connectivity, replication/HA status (if used), storage growth, connection usage
• Verify and test backups:
• ensure backups run, validate restore procedures periodically (under supervision)
• Support troubleshooting:
• identify symptoms of locking/contention, slow queries, and connection exhaustion
• collect evidence (process list/activity, slow logs, relevant metrics)

5) DevSecOps Baseline Security Hygiene

• Apply standard security practices:
• SSH key management, least privilege, secure access patterns, secrets hygiene
• Support patching routines:
• OS updates, package updates, vulnerability remediation scheduling
• Assist with hardening and exposure checks:
• firewall/security group rules, port exposure reviews, TLS/cert validity checks
• Ensure operational compliance basics:
• access logs, change tracking, and minimal audit readiness.

6) Documentation & Continuous Improvement

• Maintain and follow runbooks/SOPs for recurring tasks and incidents.
• Write short incident notes (what happened, impact, mitigation, follow-up actions).
• Automate repetitive checks with scripts (Bash/Python) and simple tooling.