Sr. DSO Engineer

As the Sr. DSO Engineer at Sleep Country, you will be at the forefront of our DevOps and security efforts, specializing in the administration, day to day operations and security of our ecosystem, with a particular focus on Oracle and Google Cloud environments. This role requires a deep understanding of Oracle technologies and applications, as well as strong leadership and problem-solving skills. You will mature our monitoring and alerting platforms while ensuring the operability, security and compliance of our cloud-based applications and services.

Responsibilities of this role will include but are not limited to:

• Oversight, development, maintenance of all aspects of DevSecOps, such as the pipeline management, logging, monitoring, and security tooling
• Work closely with our on and offshore teams to ensure that our Oracle Retail Process Orchestration and Monitoring (POM) processes are operational
• Monitoring: Maintenance and development of our monitoring and alerting platforms
• API Administration: Oversee the administration of the Apigee API management platform, ensuring secure API development, deployment, and lifecycle management.
• Data Protection: Develop and enforce policies and procedures for data protection, compliance, and privacy in alignment with GDPR, CCPA, and other relevant regulations.
• Security: Design and implement robust security practices for cloud and hybrid systems, with a focus on minimizing risks and vulnerabilities.
• Assist with the development and implementation of security policies, controls, and best practices for our Google Cloud Platform (GCP) environment.
• Incident Response: Lead and participate incident response activities related to cloud and API security, including investigation, mitigation, and recovery processes.
• Stakeholder Engagement: Collaborate with IT, development, and business teams to integrate DevSecOps considerations into technology and business initiatives.
• Innovation and Research: Stay abreast of the latest cloud technologies, trends, and threats; recommend and implement innovative DevSecOps solutions.
• Assist application teams with on-boarding to the adopted DevSecOps tools/technologies; working with vendors to troubleshoot the platform and issues related to such integrations.
• Ensure deliverables are completed within target timeframes and are consistently of high-quality, documented and support transition of operational activities.

Requirements

The Qualifications and Experience we like to see:

• Bachelor’s degree in computer science, information systems, or a related field, or equivalent education-related experience.
• A minimum of seven years of experience in DevSecOps, with at least three years focused on cloud operations, security, and cloud management.
• At least three years of development experience in object-oriented programming languages
• Proven track record of working with teams on multi-tiered, complex distributed web applications.
• Proficiency in working with CI/CD tools.
• Familiarity with project management tools
• Experience with enterprise monitoring/alerting tools
• Practical experience with infrastructure as code tools
• Understanding of Test or Behavior Driven Development.
• Familiarity with Agile, SAFe, and DevSecOps methodologies.
• General familiarity with data protection laws and regulations (GDPR, CCPA) and experience with compliance frameworks (ISO, NIST).
• Excellent written and verbal communication skills, with the ability to convey strategic information, security, and operational topics, policies, and standards as well as risk-related concepts to both technical and non-technical audiences.

Key Technologies:

• Oracle Cloud Infrastructure, Oracle Retail Cloud, Oracle Retail Merchandising
• Expertise in Google Cloud Platform and Apigee, CloudRun/CloudBuild, GKE, CloudSQL, with relevant certifications such as Google Cloud Professional Security Engineer and Apigee Certified API Engineer
• Java SpringBoot or similar build and test tools.
• Jira Software Management, Confluence
• Dynatrace Performance Monitoring and PagerDuty Operations for incident response
• Hands-on experience with Git, GitLab/GitHub/CloudBuild, Kubernetes deployment, Terraform and other Agile CI/CD