DevSecOps Engineer

Your tasks

• Design, implement, and maintain secure, scalable, and resilient infrastructure across data centres and AWS cloud environments.
• Develop automation scripts and tools using Bash, PowerShell, Python, Go, or other scripting languages.
• Build, configure, and maintain CI/CD pipelines, integrating security checks into build, testing, and deployment processes.
• Automate infrastructure provisioning and configuration management using Terraform and Ansible.
• Manage containerized applications using Docker and AWS container services, including Amazon ECS and Fargate.
• Implement infrastructure monitoring, logging, and observability using Grafana, Amazon CloudWatch, and OpenTelemetry.
• Perform vulnerability assessments, security hardening, threat and risk assessments, and security incident troubleshooting.
• Implement security controls, secrets management, access controls, and secure configurations across cloud infrastructure and applications.
• Support disaster recovery, backup and restoration, high availability, and business continuity planning.
• Troubleshoot complex infrastructure and application issues and participate in on-call support when required.
• Ensure compliance with applicable security standards and organizational policies.

Requirements

• Degree or Diploma in Computer Science, Information Technology, Computer Engineering, or a related discipline.
• Strong understanding of SDLC, CI/CD, secure software development, and DevSecOps practices.
• Hands-on experience with AWS cloud services and hybrid cloud or multi-data-centre environments.
• Proficiency in at least three scripting or programming languages, such as Bash, PowerShell, Python, or Go.
• Experience with Git and source control platforms such as GitLab, GitHub, or Bitbucket.
• Practical experience with Terraform, Ansible, Docker, and AWS ECS/Fargate.
• Knowledge of virtualization technologies such as VMware, KVM, or Hyper-V.
• Experience with monitoring, vulnerability scanning, and infrastructure security tools.
• Understanding of networking, firewalls, subnets, routing, access controls, and system hardening.
• Experience with backup, disaster recovery, and RPM-based software packaging.
• Strong analytical, troubleshooting, communication, and collaboration skills.

• Experience with HashiCorp Vault, Tenable, Fortify, Sonatype Nexus IQ, Elasticsearch, or AWS security services.
• Knowledge of ISO 27001, NIST, CIS Benchmarks, and security compliance frameworks.
• Relevant certifications such as AWS Security Specialty, CISSP, CISM, or CREST.
• Experience in government, financial services, or other highly regulated environments.
• Knowledge of API security, Zero Trust architecture, secure service-to-service communication, AWS VPC Lattice, or AWS Service Connect.