DevSecOps Engineer for MoodleUS

Moodle with us!

We're the world's most popular learning platform and we’re on a mission to empower educators to improve our world.

Find out about your new workplace...

Moodle is the world’s most trusted online learning solution. The engine of our ecosystem is Moodle LMS, the secure and customizable open source learning management platform used by over 250 million learners worldwide. Developed in conjunction with our community, Moodle LMS is complemented by an ecosystem of products including Moodle Workplace and a network of partners and services providing hosting, customizations and support. We also teach and support educators to create effective online learning experiences and share open education resources. Collectively, we empower educators to improve our world.

Moodle US, a newly formed US-based services division of Moodle Pty, provides services in learning design, implementation support, training, hosting, custom development, and support for Moodle LMS, Moodle Workplace, as well as other Moodle products.

We’ve built a passionate team of hard-working and driven people from all over the world, united by a shared belief in the ability of our platform to make a positive difference to our world. We respect our colleagues and value an open and innovative workplace, filled with integrity and of course a strong focus on education (yes, these are our company values!).

Find out more about us on our website.

What your new job can look like…

The DevSecOps Engineer for Moodle US is responsible for the security of the cloud hosted environment for client Moodle LMS instances. This includes developing and implementing security controls, testing for vulnerabilities, and monitoring the system for threats. The DevSecOps Engineer will also work with developers and operations staff to ensure that security is a top priority in all aspects of the hosting lifecycle. This position will require the ability to obtain security clearance consistent with government contract work.

With the pace of Moodle, no two days will ever be the same!

• Support multiple highly available clusters on (AWS) based infrastructure
• Following best current Devsecops practices for deployments, availability, threats and vulnerabilities
• Administering applications used for automation.
• Assist support team with escalated issues pertaining to client facing applications.
• Monitor and audit cloud infrastructure for security threats.
• Investigate and respond to security incidents.
• Participate in research and testing of new products and enhancements to the overall hosting architecture.
• Participates with on-call rotations.
• Tracks all work and requests in ticketing system
• Participate in development and testing for vulnerabilities in the hosting environment
• Consulting of developers in infrastructure configuration issues
• Ensuring the continuity of business and development environments
• Provide consultation and assistance to remote clients within specified scope of work.
• Assist with the development and maintenance of tools needed by the development team
• Manage and execute on tasks within internal devops projects
• Work with DevOps Lead to develop and execute a roadmap for all product development projects within DevOps and the company at large.
• Accountable for the ongoing review and maintenance of security procedures and policies ensuring they are always kept up to date
• OKRs as agreed with DevOps Lead
• Any other duties as required

Through this journey, you will meet regularly with a mentor to check on your progress, ask questions, and set new goals. Our ultimate goal is to help you develop in this role and in your Moodle expertise.

Requirements

We’d love to hear from you, especially if you can talk to us about your:

• Strong knowledge of major operating systems, such as Linux, and their administration, as well as of networking, load balancing, protocols such as TCP/IP and services like DNS, Mail
• Proficiency in general security concepts and best practices relating to servers, networks, passwords, 2fa, applications, etc.
• Programming and/or scripting experience - one or more of the following: Python, PHP, Go, Javascript or Bash
• Extensive experience troubleshooting network, system and application issues
• Good understanding of containerization technologies
• Some experience building and maintaining AWS infrastructure (VPC, EC2, Security Groups, IAM, EC2, RDS, S3, Cloudwatch, and Security Services)
• Able to demonstrate experience and disciplines working in a large production environments