Agoda is seeking a Senior Security Operations Engineer to operate and improve key enterprise security platforms across endpoint, server, network, and secure access environments. The role involves working closely with infrastructure, network, IT, and engineering teams to strengthen security operations, improve service reliability, and drive automation across critical security technologies. The engineer will design and optimize CrowdStrike, administer Zscaler ZIA, ZDX, and ZPA, and troubleshoot network connectivity and VPN issues. The position requires using APIs and scripting to automate tasks and deploying configurations through Terraform and CI/CD pipelines.

At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore the world. Today, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide. No two days are the same at Agoda. Data and technology are at the heart of our culture, fueling our curiosity and innovation. If you’re ready to begin your best journey and help build travel for the world, join us. **Senior Security Operations Engineer:** We are seeking a hands-on Senior Security Operations Engineer to operate and improve key enterprise security platforms across endpoint, server, network, and secure access environments. This role will work closely with infrastructure, network, IT, and engineering teams to strengthen security operations, improve service reliability, and drive automation across critical security technologies. **Key Responsibilities:** * Design, build, and optimize CrowdStrike across user devices and server environments; define and enforce sensor policies, detection tuning, and response playbooks. * Administer and support Zscaler ZIA, ZDX, and ZPA. Manage policy lifecycles, tunnel configurations, app connector health, and user experience monitoring. * Troubleshoot and resolve issues related to network connectivity, VPN, secure access, and SASE services. * Support security operations activities, incident handling, and root cause analysis across managed platforms. * Use APIs and scripting to automate routine tasks, reporting, and platform integrations. * Deploy and manage security platform configurations through Terraform and CI/CD pipelines, following IaC best practices and change management processes. * Apply generative AI use cases to improve operational workflows, troubleshooting, and team productivity. **Required Skills and Experience:** * 7+ years of experience in security operations, endpoint security, network security, or security engineering roles. * Hands-on experience with CrowdStrike for both user devices and servers. * Strong knowledge of Zscaler ZIA, ZDX, and ZPA or other SASE solutions. * Experience in troubleshooting network, VPN, and SASE-related issues in enterprise environments. * Familiarity with APIs, scripting, Terraform, and CI/CD pipelines. * Strong problem-solving skills and the ability to collaborate across multiple technical teams. #### Please review our Hiring Process Guidelines before your interview — click [here](https://careersatagoda.com/interview/)to learn how interviewing at Agoda works.

About the role We are looking for a talented and motivated DevOps Engineer to join our team. In this role, you will be responsible for managing and optimizing our continuous integration and continuous deployment (CI/CD) processes, ensuring seamless software delivery and infrastructure management. You will collaborate with cross-functional teams to enhance our development and deployment processes, contributing to the overall efficiency and effectiveness of our software development lifecycle. Job Description * Infrastructure as Code: Design, implement, and maintain infrastructure using tools like Terraform, CloudFormation, or Ansible to manage cloud and on-premises resources. * CI/CD Pipelines: Develop, manage, and improve CI/CD pipelines using tools such as Jenkins, GitLab CI to ensure reliable and efficient software delivery. * Automation and Orchestration: Automate repetitive tasks and streamline workflows using scripting languages like Python, Bash, or PowerShell. * Monitoring and Logging: Implement monitoring and logging solutions to ensure system health and performance, using tools like Prometheus, Telegraf, Grafana, ELK Stack. * Collaboration: Work closely with development, QA, and operations teams to ensure smooth software releases and effective communication. * Security: Integrate security practices into the DevOps processes, including vulnerability assessments, access control, and compliance with industry standards. * Incident Management: Troubleshoot and resolve issues related to application and infrastructure performance, ensuring high availability and reliability. * Cloud Services Management: Manage and optimize cloud services (e.g., AWS, Google Cloud) for performance, cost, and scalability. * Documentation: Maintain clear and comprehensive documentation for processes, systems, and procedures. Qaulifications * Education: Bachelor’s degree in computer science, Engineering, or a related field, or equivalent practical experience. * Experience: [Specify years of experience] years of experience in a DevOps or related role. * Proficiency in scripting languages (e.g., Python, Bash, Powershell). * Experience with infrastructure as code tools (e.g., Terraform, CloudFormation). * Knowledge of CI/CD tools (e.g., Jenkins, GitLab CI). * Familiarity with containerization and orchestration (e.g., Docker, Kubernetes). * Strong understanding of cloud platforms (e.g., AWS, GCP). * Experience with monitoring and logging tools (e.g., Prometheus, Grafana, ELK). * Understanding of security best practices and tools. Preferred * Experience with serverless architectures and microservices. * Experience in a fast-paced, agile development environment. * Knowledge of network and security configurations in cloud environments. * Strong problem-solving skills. * Excellent communication and collaboration abilities. * Ability to work independently and in a team. * Certifications: e.g., AWS Certified DevOps Engineer, Google Professional DevOps Engineer are a plus.

You will be responsible for designing, developing, and maintaining the infrastructure, cloud platforms, and deployment pipelines for Qonnect's Industrial IoT, AI, and software applications. You will collaborate with software developers, data/AI engineers, and project managers to ensure systems are deployed rapidly, securely, and stably to support real-world industrial customer usage. Your role involves managing cloud environments, automating deployment processes, and ensuring high availability and reliability of the platform.

At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore the world. Today, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide. No two days are the same at Agoda. Data and technology are at the heart of our culture, fueling our curiosity and innovation. If you’re ready to begin your best journey and help build travel for the world, join us. We are looking for a hands on Senior Security Engineer to secure our cloud and platform environments. This role works closely with engineering teams and focuses on building, reviewing, and operating security controls using Infrastructure as Code, Kubernetes, and custom security services written in Go and TypeScript. **Key Responsibilities:** Secure Cloud Deployment: * Design, implement, and manage secure cloud deployments across AWS and GCP environments using Terraform. * Kubernetes & GitOps Security: Deploy and manage both internal and third‑party security products within the Kubernetes ecosystem. * Work with GitOps workflows using tools like Argo CD and Flux, and Helm charts. * Security Automation & Tooling: Design and build security tooling and services using Go and TypeScript. * Misconfiguration Management: Proactively identify, analyze, and remediate cloud misconfigurations. * Cloud Architecture Guidance: Provide guidance to Engineering teams on secure architecture. * Threat Detection & Response: Build and optimize cloud-native detection rules and alerting pipelines to monitor for suspicious activities within the cloud and container workloads. **Required Skills & Experience:** * 8+ years of experience in security engineering, cloud security, or platform engineering roles. * Hands-on experience securing production workloads in AWS and GCP. * Strong experience designing and securing Infrastructure as Code using Terraform. * Deep understanding of Kubernetes security, including troubleshooting Helm deployments and GitOps-based workflows. * Strong programming skills in Go and TypeScript, with Python used for automation where appropriate. * Experience embedding security controls into CI/CD pipelines. * Certifications (Required) Certified Kubernetes Administrator (CKA) Certified Kubernetes Security Specialist (CKS) Certifications (Preferred) AWS Certified Security Specialty Google Professional Cloud Security Engineer HashiCorp Certified: Terraform Associate * Nice-to-Have Experience with Policy-as-Code frameworks such as Open Policy Agent (OPA). * Experience securing service mesh environments (Istio). Background in software engineering or platform engineering before moving into security.

At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore the world. Today, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide. No two days are the same at Agoda. Data and technology are at the heart of our culture, fueling our curiosity and innovation. If you’re ready to begin your best journey and help build travel for the world, join us. We are looking for a hands on Senior Security Engineer to secure our cloud and platform environments. This role works closely with engineering teams and focuses on building, reviewing, and operating security controls using Infrastructure as Code, Kubernetes, and custom security services written in Go and TypeScript. **Key Responsibilities:** Secure Cloud Deployment: * Design, implement, and manage secure cloud deployments across AWS and GCP environments using Terraform. * Kubernetes & GitOps Security: Deploy and manage both internal and third‑party security products within the Kubernetes ecosystem. * Work with GitOps workflows using tools like Argo CD and Flux, and Helm charts. * Security Automation & Tooling: Design and build security tooling and services using Go and TypeScript. * Misconfiguration Management: Proactively identify, analyze, and remediate cloud misconfigurations. * Cloud Architecture Guidance: Provide guidance to Engineering teams on secure architecture. * Threat Detection & Response: Build and optimize cloud-native detection rules and alerting pipelines to monitor for suspicious activities within the cloud and container workloads. **Required Skills & Experience:** * 8+ years of experience in security engineering, cloud security, or platform engineering roles. * Hands-on experience securing production workloads in AWS and GCP. * Strong experience designing and securing Infrastructure as Code using Terraform. * Deep understanding of Kubernetes security, including troubleshooting Helm deployments and GitOps-based workflows. * Strong programming skills in Go and TypeScript, with Python used for automation where appropriate. * Experience embedding security controls into CI/CD pipelines. * Certifications (Required) Certified Kubernetes Administrator (CKA) Certified Kubernetes Security Specialist (CKS) Certifications (Preferred) AWS Certified Security Specialty Google Professional Cloud Security Engineer HashiCorp Certified: Terraform Associate * Nice-to-Have Experience with Policy-as-Code frameworks such as Open Policy Agent (OPA). * Experience securing service mesh environments (Istio). Background in software engineering or platform engineering before moving into security.