ABOUT THE ROLE:
We are seeking a skilled Cloud Infrastructure Engineer to join our dynamic team. This hands-on role involves evaluating and enforcing cybersecurity and compliance controls and focuses on developing automation solutions using Python, Go or equivalent and deploying secure AWS infrastructure with Terraform. This position plays an integral role in protecting iHerb’s infrastructure from internal and external threats and collaborates closely with our technology teams to define and implement the security best practices, perform architectural and design reviews, threat modeling, conduct security assessments, and support the identification, interpretation, and remediation of threat and vulnerabilities across iHerb’s tech stack.
RESPONSIBILITIES:
- Design, develop and maintain automation framework and scripts to streamline security processes and workflows.
- Deploy and manage AWS resources using Terraform, ensuring secure and scalable .
- Implement innovative security solutions to reduce the mean time to detect and respond.
- Implement and optimize AWS Step Functions and Lambda for serverless automation workflows.
- Leverage AWS security-centric services (e.g., IAM, Control Tower, KMS, Macie, GuardDuty, CloudTrail, EventBridge) to enhance cloud security.
- Collaborate with cross-functional teams to integrate security automation into CI/CD pipelines.
- Monitor and troubleshoot AWS infrastructure to ensure high availability, performance and compliance.
- Stay updated on AWS best practices, security trends, and emerging technologies to drive continuous improvements.
- Must be able to perform hands-on support for a wide range of security technologies, including, but not limited to: Pipeline security, DevSecOps, CloudFormation templates, Terraform, Docker, Kubernetes, SIEM, CSPM and Vulnerability Scanners.
- Work independently with minimal supervision, while providing guidance and collaborating with the team as needed.
REQUIREMENTS:
- Bachelor’s degree in Computer Science, Information Technology, or related field.
- 5+ years of professional experience in Python, Go or equivalent development, focusing on automation.
- 5+ years of hands-on experience with AWS technologies, particularly security-centric services (IAM, KMS, Control Tower, Macie, GuardDuty, CloudTrail, EventBridge, etc).
- Experience in Cloud SIEM, IPS (Intrusion Prevention System), and Vulnerability Scanners.
- Proficiency in writing and developing infrastructure-as-code using Terraform.
- Working knowledge of AWS Step Functions and AWS Lambda for serverless architectures.
- Familiar with cloud security best practices and compliance frameworks.
- Strong problem-solving skills and the ability to work independently or in a team environment.
- Excellent communication skills to collaborate with technical and non-technical stakeholders.
- Amenable working in US Time zone (PST).
PREFERRED QUALIFICATIONS:
- AWS certification (e.g., AWS Certified Security - Specialty, AWS Certified Solutions Architect).
- Experience with CI/CD tools (e.g., Scalr, Harness, Jenkins) and containerization (e.g., Docker, Kubernetes).
- Knowledge of additional programming languages or scripting tools.
- Familiarity with other cloud platforms (e.g., Alibaba, GCP) is a plus.
- Experience with DevSecOps methodologies and secure coding practices.
Pay: Php250,000.00 - Php300,000.00 per month
Benefits:
- Additional leave
- Company Christmas gift
- Company events
- Opportunities for promotion
- Pay raise
- Work from home
Application Question(s):
- Do you have AWS Certification? Kindly specify.
- What CI/CD Tools have you used?
- Do you have experience in DevSecOps methodologies? Kindly elaborate.
- Are you amenable working in US Time zone (PST)?
- How soon can you start?
Experience:
- Python: 5 years (Preferred)
- Go: 5 years (Preferred)
- AWS Technologies: 5 years (Preferred)
- Cloud SIEM: 5 years (Preferred)
- IPS (Intrusion Prevention System): 5 years (Preferred)
- CI/CD Tools: 3 years (Preferred)
Work Location: Remote