高级DevOps（1.5个月项目）
Senior DevOps (1.5 month project)
项目职责
在 DEV、TEST、STAGING、UAT 和 PROD 环境中操作和维护本地基础设施环境。
确保网络区域划分和环境隔离符合外部/DMZ/内部架构要求。
配置和支持 Web 应用防火墙（WAF）以及各区域之间的受控流量。
操作和维护外部和内部 API 网关。
通过 Software AG 集成平台支持企业级集成。
操作身份和访问管理基础设施，包括 miniOrange IdP、多因素认证（MFA）和 OIDC 集成。
使用 Azure DevOps 设计、维护和操作 CI/CD 流水线，包括安全发布提升。
实施和操作安全 SDLC 控制措施（SAST、SCA、DAST）。
实施并维护监控、日志和审计功能（Prometheus、Grafana、Graylog、Sentry、SIEM 转发）。
支持备份、复制和灾难恢复活动，包括灾难恢复测试。
要求
必备条件
5 年以上 DevOps 或基础设施工程经验。
在企业环境中具有本地基础设施部署和运维经验。
有管理多个隔离环境（DEV、TEST、STAGING、UAT、PROD）的经验。
了解网络安全区域划分架构（外部/DMZ/内部）。
有使用 Web 应用防火墙（WAF）的实际经验。
有配置和支持外部和内部 API 网关的经验。
有使用企业级集成/ESB 平台（Software AG）的经验。
有集成和操作身份提供者（IdP）（miniOrange）的经验。
了解 OIDC/OAuth2 认证流程和多因素认证（MFA）。
有使用 TLS/mTLS 安全通信和基于 PKI 的证书管理的经验。
有使用 Azure DevOps 进行 CI/CD 流水线的实际经验。
有实施安全 SDLC 实践的经验，包括 SAST、SCA 和 DAST。
了解威胁建模技术，特别是 STRIDE。
有使用监控和可观测性工具（Prometheus、Grafana）的经验。
有使用集中式日志和应用监控（Graylog、Sentry、SIEM 集成）的经验。
有支持备份、复制和灾难恢复流程的经验，包括灾难恢复测试。
最初发布于 Himalayas
查看英文原文
Project Responsibilities
Operate and maintain on-premise infrastructure environments across DEV, TEST, STAGING, UAT, and PROD.
Ensure network zoning and environment segregation in line with External / DMZ / Internal architecture.
Configure and support Web Application Firewalls (WAFs) and controlled traffic flows between zones.
Operate and maintain External and Internal API Gateways.
Support enterprise integrations via the Software AG integration platform.
Operate identity and access management infrastructure, including miniOrange IdP, MFA, and OIDC integrations.
Design, maintain, and operate CI/CD pipelines using Azure DevOps, including secure release promotion.
Implement and operate Secure SDLC controls (SAST, SCA, DAST).
Implement and maintain monitoring, logging, and audit capabilities (Prometheus, Grafana, Graylog, Sentry, SIEM forwarding).
Support backup, replication, and disaster recovery activities, including DR testing.
Requirements
Must-haves
5+ years of experience in DevOps or Infrastructure Engineering.
Experience with on-premise infrastructure deployment and operations in enterprise environments.
Experience managing multiple isolated environments (DEV, TEST, STAGING, UAT, PROD).
Knowledge of network security zoning architectures (External / DMZ / Internal).
Hands-on experience working with Web Application Firewalls (WAFs).
Experience configuring and supporting External and Internal API Gateways.
Experience working with enterprise integration / ESB platforms (Software AG).
Experience integrating and operating Identity Providers (IdP) (miniOrange).
Knowledge of OIDC / OAuth2 authentication flows and Multi-Factor Authentication (MFA).
Experience with TLS / mTLS secure communication and PKI-based certificate management.
Hands-on experience with CI/CD pipelines using Azure DevOps.
Experience implementing Secure SDLC practices, including SAST, SCA, and DAST.
Knowledge of threat modeling techniques, specifically STRIDE.
Experience with monitoring and observability tools (Prometheus, Grafana).
Experience with centralized logging and application monitoring (Graylog, Sentry, SIEM integration).
Experience supporting backup, replication, and disaster recovery processes, including DR testing.
Originally posted on Himalayas