M07 - DevSecOps Engineer

Role Overview

We are seeking an experienced DevSecOps Engineer to design, automate, secure, and maintain scalable cloud infrastructure, deployment pipelines, and platform services.

The successful candidate will be responsible for cloud infrastructure management, CI/CD automation, security implementation, vulnerability management, monitoring, and operational support to ensure platform reliability and security compliance.

Key Responsibilities

• Design, implement, and maintain secure, scalable, and resilient cloud infrastructure.
• Develop automation solutions for application deployment, infrastructure provisioning, monitoring, and maintenance.
• Design, implement, and optimise CI/CD pipelines to support automated software builds, testing, integration, and deployment.
• Implement Infrastructure as Code (IaC) and environment automation practices.
• Manage and optimise AWS cloud resources and platform services.
• Maintain CI/CD tooling and release management processes.
• Monitor platform availability, performance, reliability, resource utilisation, and operational health.
• Implement security controls to comply with government security requirements.
• Design and maintain system security architecture, including threat and risk assessments.
• Conduct vulnerability assessments, security reviews, system hardening, and remediation activities.
• Implement backup, disaster recovery, and business continuity solutions.
• Troubleshoot infrastructure, application deployment, and platform-related issues.
• Collaborate with development teams to integrate security practices throughout the Software Development Lifecycle (SDLC).
• Support incident response, operational troubleshooting, and continuous platform improvements.

Requirements

• Strong understanding of SDLC, CI/CD, Test-Driven Development (TDD), and DevSecOps methodologies.
• Hands-on experience designing, deploying, and maintaining cloud-native applications and infrastructure on AWS.
• Proficiency in at least two programming or scripting languages, such as Bash, PowerShell, Python, JavaScript, or Java.
• Experience with Infrastructure as Code and automation tools such as Terraform or Ansible.
• Strong experience with Docker and Kubernetes.
• Experience with GitLab, source code management, and CI/CD platforms.
• Experience implementing monitoring, logging, and observability solutions.
• Knowledge of application security, cloud security, secure coding, and DevSecOps principles.
• Hands-on experience with vulnerability management, security assessments, system hardening, and remediation.
• Familiarity with Cloud Native Computing Foundation (CNCF) technologies such as Prometheus, Helm, ArgoCD, Istio, Gatekeeper, and Crossplane.
• Familiarity with enterprise security and secrets management tools such as HashiCorp Vault, Tenable, Fortify, Sonatype Nexus IQ, and AWS security services.
• Experience with AWS identity and access management, networking, monitoring, container services, and security.
• Strong troubleshooting, incident response, and production support capabilities.
• Experience working in regulated or government environments is preferred.
• Experience with the Government Commercial Cloud (GCC) environment is advantageous.