DevSecOps (DSO) Engineer

Responsibilities

The DevSecOps Engineer is responsible for engineering, implementing, and maintaining secure, automated, and reliable release management processes using modern DevOps platforms. This role bridges development, security, and operations teams to ensure continuous integration, continuous delivery (CI/CD), and secure code deployments. The engineer plays a key role in designing and managing pipelines, automating deployment processes, integrating security into the CI/CD lifecycle, and ensuring release governance in alignment with organizational policies.

1. Work Item & Application Lifecycle Management

• Design and implement work item tracking tools to manage the full lifecycle of releases—from request initiation, review, approval, testing, to production verification.
• Create and maintain workflows and DSO solutions that reflect organizational governance, including state transitions, approval checkpoints, and audit trails.
• Automate pipeline executions triggered by workflow state changes to ensure seamless coordination between development and release processes.

2. Release Management via CI/CD Platforms

• Engineer and maintain CI/CD pipelines using platforms such as Azure DevOps, GitHub Actions, GitLab CI/CD, Jenkins, or similar tools for automated build, test, and deployment across environments.
• Develop and manage release workflows that ensure traceability, compliance, and rollback capabilities where necessary.
• Configure and maintain CI/CD environments, build agents/runners, shared variables/secrets, and pipeline templates to support scalable delivery.

3. Security Integration (DevSecOps Practices)

• Integrate security scanning tools (e.g. SAST, DAST, open-source dependency checks) into CI/CD pipelines.
• Implement and enforce security gates, policy checks, and approvals at various pipeline stages.
• Collaborate with relevant IRAS teamsto ensure secure code delivery and alignment with organisational security standards.

4. Pipeline Automation & Infrastructure as Code (IaC)

• Maintain reusable pipeline code and templates under version control for consistency and auditability.
• Promote best practices around automation, testing, and configuration management.

5. Monitoring, Governance, and Reporting

• Design monitoring and alerting systems for pipeline health, release failures, and deployment metrics.
• Implement release governance including manual approval gates, quality checks, and change control processes.
• Implement and review of access right policy and mapping in DSO platform.

6. Stakeholder Collaboration

·        Work closely with development, QA, operations, and security teams to align delivery processes with DevSecOps principles.

• Provide guidance to internal teams on CI/CD platform usage, pipeline best practices, and secure delivery methods.
• Identify areas for improvement in release processes, security posture, and automation capabilities.

Technical Skillset

Programming Languages

·        C# / .NET – Application development and scripting in Microsoft environments

·        JavaScript – Web-based scripting and tool integration

·        Python – Automation, scripting, and API interaction

Scripting & Shell

·        PowerShell – Windows automation and Azure CLI scripting

·        Bash – Linux shell scripting and system operations

Integration & APIs

·        RESTful API Usage & Integration – Consuming and integrating external services and tools

Database & Data Handling

·        Microsoft SQL Server – Querying, data management, and integration

As Required

Azure DevOps Platform

·        Pipelines, Repos, Boards, Artifacts, Test Plans

·        Agent Pool Management – configuring, scaling, and securing build agents

Azure Cloud & Integration

·        App Services, AKS, Functions, Logic Apps, Key Vault

Infrastructure & Automation

·        Terraform, ARM templates

·        YAML, PowerShell, Azure CLI

·        GitOps with Flux

Security & Governance

·        RBAC, secure pipelines, secrets management

·        Release approvals, compliance enforcement

·        Artifact governance and Management

Containerization & Orchestration

·        Docker, Kubernetes (AKS), GitOps workflows

Monitoring & Observability

·        Azure Monitor, Log Analytics, Application Insights

·        Performance Optimisation – pipeline efficiency, resource usage, deployment speed

Toolchain Integration

·        GitHub, SonarQube, Fortify, etc

Testing & Quality Assurance

·        Automated testing, Azure Test Plans

Operating System Knowledge

·        Linux fundamentals, shell scripting

AI and Agentic Workflows

·        AI Agent Frameworks (e.g. Langchain)

·        Deployment and operations of AI agent workloads and integration into CI/CD pipelines

Experience Requirements

·        Minimum 2 years experience in maintaining the system with basic/conceptual knowledge of required skillsets.

·        Basic understanding of Azure DevOps systems.

·        Familiarity with scripting languages (e.g. Bash, Python).

·        Experience with CI/CD tools.

·        Basic knowledge of cloud platforms (AWS, Azure, GCP).

·        Understanding of version control systems (e.g. Git).

·        Minimum 3 years experience in designing, developing and maintaining the system with professional experience in the required skillsets.

·        Proven experience in designing end-to-end DevOps architectures from requirements gathering through to implementation.

·        Experience architecting scalable, resilient infrastructure solutions using infrastructure as code principles.

·        Proficient in infrastructure as code (e.g. Terraform).

·        Experience with Git and modern branching workflows.

·        Experience with CI/CD pipelines and DevOps tools.

·        Experience implementing security controls within CI/CD pipelines and cloud-native architectures.

·        Good understanding of containerization (Docker) and orchestration (Kubernetes).           

·        Good understanding of networking, security, and system administration.

·        Strong understanding of the Software Development Life Cycle (SDLC), Test-Driven Development (TDD), Continuous Integration (CI), and Continuous Delivery (CD).

·        Minimum 5 years experience in designing, developing and maintaining the system with deep expertise in the required skillsets.

·        Proven leadership in designing scalable, secure, and resilient DevOps solutions that support multiple business units and complex operational requirements.

·        Demonstrated ability to design system architectures that balance performance, security, cost, and maintainability.

·        Design DevOps solutions that integrate with existing enterprise systems whilst modernising operational capabilities.

·        Architect comprehensive DevOps solutions that span multiple teams, technologies, and business domains.

·        Deep expertise in cloud architecture and DevOps best practices.

·        Leadership in designing scalable, secure, and resilient systems.

·        Experience with CI/CD pipelines and DevOps tools.

·        Experience with monitoring, logging, and incident response tools.

·        Ability to mentor junior engineers and lead DevOps initiatives.

·        Strong understanding of compliance, governance, and risk management.

·        Strong ability to troubleshoot complex issues across system resources and application stacks.

·        Experience with cloud-native services and cost optimization.

·        Experience with disaster recovery planning, system backup, and restore processes.

·        Hands-on experience with security assessments, vulnerability scanning, and system hardening.

·        Experience performing security assessments in government or highly regulated environment.