DevSecOps Engineer

Job Responsibilities

• Design, implement, and maintain secure, scalable, and resilient infrastructure across data centres and AWS cloud environments.

• Develop automation scripts and tools using Bash, PowerShell, Python, Go, or other scripting languages.

• Build, configure, and maintain CI/CD pipelines, integrating security checks into build, testing, and deployment processes.

• Automate infrastructure provisioning and configuration management using Terraform and Ansible.

• Manage containerized applications using Docker and AWS container services, including Amazon ECS and Fargate.

• Implement infrastructure monitoring, logging, and observability using Grafana, Amazon CloudWatch, and OpenTelemetry.

• Perform vulnerability assessments, security hardening, threat and risk assessments, and security incident troubleshooting.

• Implement security controls, secrets management, access controls, and secure configurations across cloud infrastructure and applications.

• Support disaster recovery, backup and restoration, high availability, and business continuity planning.

• Troubleshoot complex infrastructure and application issues and participate in on-call support when required.

• Ensure compliance with applicable security standards and organizational policies.

Requirements

• Degree or Diploma in Computer Science, Information Technology, Computer Engineering, or a related discipline.

• Strong understanding of SDLC, CI/CD, secure software development, and DevSecOps practices.

• Hands-on experience with AWS cloud services and hybrid cloud or multi-data-centre environments.

• Proficiency in at least three scripting or programming languages, such as Bash, PowerShell, Python, or Go.

• Experience with Git and source control platforms such as GitLab, GitHub, or Bitbucket.

• Practical experience with Terraform, Ansible, Docker, and AWS ECS/Fargate.

• Knowledge of virtualization technologies such as VMware, KVM, or Hyper-V.

• Experience with monitoring, vulnerability scanning, and infrastructure security tools.

• Understanding of networking, firewalls, subnets, routing, access controls, and system hardening.

• Experience with backup, disaster recovery, and RPM-based software packaging.

• Strong analytical, troubleshooting, communication, and collaboration skills.

Preferred Qualifications

• Experience with HashiCorp Vault, Tenable, Fortify, Sonatype Nexus IQ, Elasticsearch, or AWS security services.

• Knowledge of ISO 27001, NIST, CIS Benchmarks, and security compliance frameworks.

• Relevant certifications such as AWS Security Specialty, CISSP, CISM, or CREST.

• Experience in government, financial services, or other highly regulated environments.

• Knowledge of API security, Zero Trust architecture, secure service-to-service communication, AWS VPC Lattice, or AWS Service Connect.