DevOps Engineer, Doximity

• Extensive AWS knowledge and experience
• Solid understanding of Kubernetes primitives and Helm
• Automation experience with configuration and resource management tools such as Terraform and Ansible
• Experience with CI and CD using tools such as Github Actions, Atlantis, CircleCI, Terraform testing
• Ability to work in a proactive manner

Desirable

• We are looking for an experienced DevOps engineer to join our Infrastructure Security team
• You will contribute and own Security efforts for our entire application and infrastructure stack as well as support and build products alongside our 300+ person engineering team used by millions of medical professionals
• Help maintain our private security bug bounty program hosted on Hackerone: this involves engaging security researchers, validating security finds, determining impact/risk, awarding bounties, and fixing or coordinating remediation efforts
• Develop, schedule, and execute automated security audits on infrastructure using industry-standard security frameworks like the CIS Benchmark
• Help set good security posture in our Terraform modules, Helm charts, Ansible playbooks, etc that other teams will leverage
• Active participation in the design, implementation, and maintenance of the development, staging, and production infrastructure and application security
• Analyze HTTP traffic to create and update WAF rules to reduce the effectiveness of malicious bots, scrappers, and attackers
• Lead security/policy-related audits such as SOC2 Type II
• Work with key stakeholders to document existing security policies and create new ones
• Remediate security problems following our Security Incident Response (SIR) process and write post-mortem reports for security-related issues
• Continuously improve our security observability using a variety of tools
• Periodically audit and rotate access credentials
• You’ll be asked to maintain a minimum of 5 hours overlap with 9:30 to 5:30 PM Pacific time
• Participate in a 1-week on and 4 weeks off, 24/7 on-call rotation
• Travel to company offsites once/quarter is expected