Bright IT Sp. z o.o.
May 2022 - Present
DevOps Engineer, ISO 27001 Internal Auditor
Short position description:
- Design and deployment of cloud infrastructure (mainly AWS) using Infrastructure as a Code (Terraform, AWS CDK), project hardening and maintenance.
- Creating CI/CD workflows using GitHub Actions, Jenkins and Azure DevOps.
- Implementation of infrastructure monitoring solution based on Prometheus/Grafana/Loki/SNMP.
- Configuration automation using Ansible and custom scripts (Bash, Python).
- Administration of company toolset (Google Workspace, Slack, Atlassian, 1Password).
- Implementation of a security monitoring platform (Wazuh), system hardening (Linux, cloud infrastructure).
- Reorganization of internal LAN network (FortiGate, Unifi, Radius). Integration with a multi-project cloud environment.
- Enhancement of the company's ISMS, including the development and analysis of existing IT and business documentation (policies, procedures). Staff training.
- Conducting Information Security audits regarding compliance with the ISO 27001 standard
- Ensuring compliance with internal regulations, regulatory requirements, international standards (ISO 27001) and good practices in the field of information security.
- Identification, assessment and analysis of information security risks for: IT systems, IT infrastructure, internal business procedures and contracts with service providers.
- Creating technical documentation and training materials.
- DevOps
- AWS
- Information Security