DevSecOps Engineer

Richemont, one of the world leaders in the luxury sector, has various Houses specializing in jewelry, watches and high-end accessories.Each Maison proudly embodies a tradition of style, quality and craftsmanship and Richemont strives to preserve the heritage and identity specific to each of them.At the same time, we are committed to innovating and designing new products in line with the values ​​of our Houses, through a process of permanent creativity.

DevSecOps Engineer

MAIN PURPOSE 

As a DevSecOps Engineer, you are part of the Application Publishing and load-balancing Engineering Team within the Cloud Infrastructure Department. You will be the specialist for the F5 Platform, Cloud Native Load Balancing, WAF Security, and CDN/DNS Integration. You will be responsible for engineering the Application Delivery Platform on which thousands of Virtual and Physical Servers are deployed within our Public Multi-Cloud Environment (e.g., AWS, Alibaba Cloud, and Google Cloud).  

Working within a product-based framework, you will have to develop, engineer, and maintain the different APLB products, including F5 and Native Cloud Load Balancers, WAF, ICAP, CDN, and Public DNS for critical highly available production environments integrating concepts such as infrastructure-as-code (IAC) and end-to-end automation. You will be asked to challenge the status quo and improve the current solution. The Cloud APLB Engineer will also be the main point of contact to receive new requirements of our clients, and you will integrate them into the product roadmaps with the product owner.  Finally, you will continuously evolve the standards & procedures for the operational team to deploy and operate APLB Products in an efficient and quality-oriented way. 

KEY RESPONSIBILITIES 

• In charge of multiple F5 BIG-IP Instances around the world, you will be asked to evaluate and recommend major evolutions of the architecture 
• In charge of Cloud Native Load Balancer product within Public Cloud Platforms (AWS, Alibaba, GCP) 
• In charge of CDN and Public DNS design and automation 
• Responsible for designing, assessing, and implementing new solutions, including Load Balancing, WAF Security, CDN, and DNS 
• Analyse, deal, and resolve technical incidents at Level 3 in case of escalation. 
• High level of automation through IAC is required (terraform, Git, Ansible, Vault …) 
• Work in multinational teams/projects in collaboration with Engineers, Architects, and Operational Teams. 
• Work in close partnership with the Cloud Platform and the other Engineering Teams to evaluate, test, and deploy other infrastructures that are in line with our global IT strategy in the Public Cloud 

PROFILE 

• A minimum of 5 years of experience in a production Data Centre environment with F5 and public Cloud Load Balancers, including work experience in a Multinational IT Organization. 
• Graduated in an Engineering School, Bachelor’s or Master's degree in Computer Science or equivalent field 
• Fluent in English, French would be a plus  
• Strong Public Cloud experience: AWS, Alibaba, and GCP 
• Hands-on experience with IaC Tools and Practices 
• Automation and Scripting are for you the default way of working 
• Certifications on F5 BIG-IP, Public Cloud Providers, Terraform, Ansible, and GitLab are a plus 
• Knowledge of programming and Scripting (e.g., Python, bash, TCL) 
• Constant learning culture and interest in other native Cloud Products (e.g., Serverless, Container, IAM, etc…) 

SKILLS 

• Proven experience in Administering F5 BIG-IP Systems and load-balancing technologies in a large-scale infrastructure. 
• Strong DevOps culture and comfortable with IaC Tools 
  • Terraform 
  • Ansible 
  • Git 
  • GitLab 
• Very good knowledge of: 
  • ADC 
  • Web Applications - HTTP 
  • Networking TCP/IP
  • Operating systems  
  • Application stack and standard load balancer deployment patterns. 
• Familiar with virtualization and cloud environments (VMware, AHV, AWS, GCP, Alibaba). 
• Security first oriented: security standards, SSL certificates management, ciphers, authentication method, application behavior, iRules  
• Comfortable and confident when speaking with clients as a technical expert. Able to translate technical concepts into simple terminology for clients having different levels of technical background 
• Ability to lead and complete projects independently and delegate tasks to others. Proactive and manage expectations. Adjust to shifting priorities in a fast-paced, dynamic environment. 
• Demonstrated an ability to develop and manage effective working relationships within an organization and with multiple clients and/or stakeholders. 
• Demonstrated experience in performance troubleshooting in complex network environments cross-cloud and on-premises. 
• Being a technical Leader and reference for the operational Team to ensure constant training and skills re-enforcement 

#Richemont #WeCraftTheFuture