DevSecOps Engineer (Associate Consultant / Consultant)

The DevSecOps Engineer is the primary technical delivery resource for the AI Platform and supports the full software development lifecycle, including AI pipelines, backend services, infrastructure provisioning, CI/CD automation, security controls and system integrations.

The DevSecOps Engineer shall demonstrate proficiency in:

a) developing agentic AI and document-processing solutions using approved Government AI services;

b) building and operating cloud-native solutions on AWS GCC;

c) developing secure APIs and enterprise integrations;

d) implementing DevSecOps pipelines, infrastructure-as-code, monitoring and security controls;

e) developing systems that handle legally sensitive and personal data; and

f) working effectively in Agile, multidisciplinary delivery teams.

g) Experience with OutSystems Platform integration will be advantageous.

Responsibilities

• Work with Business owner, business analyst and solution architect to translate user stories into technical requirements;

• Develop and maintain API integrations with STREAM, CAMP and any other required systems;

• Design and build the agentic AI pipeline, including LLM API integration, prompt engineering, skill and context design, structured output schemas, confidence scoring, and error handling;

• Work with Software Quality Engineer to develop automation and processes to deploy, manage, scale and monitor applications in data centres and cloud environments;

• Troubleshoot and resolve system and application issues, participating in on-call escalations for critical incidents;

• Take ownership of end-to-end infrastructure and security solutions across the products and relevant systems;

• Deploy and manage monitoring tools to track infrastructure performance, utilisation and health;

• Implement configuration management systems for business continuity and automate disaster recovery measures;

• Ensure provision of virtual machines, databases, application containers and licenses for development teams;

• Configure and maintain CI/CD pipelines, incorporating streamlined change management and release processes;

• Develop scripts and automation tools to support software build, integration and deployment across development and production environments;

• Automate the configuration management of development, QA, and production workloads;

• Design, build, optimise and monitor automation systems to identify bottlenecks and maximise service availability;

• Implement security practices that comply with industry standards to protect MinLaw's data and infrastructure;

• Plan, implement and monitor system security architecture, including threat and risk assessments;

• Perform security checks, such as vulnerability assessments and system hardening, and troubleshoot security incidents; and

• Apply secure configurations and best practices when implementing security controls in infrastructure and applications

Required Experience & Skills

Mandatory

• Degree or diploma in Computer Science, Computer or Electronics Engineering, IT or related disciplines.

• Passion for automation, standardisation, and best practices in infrastructure and security.

• Strong understanding of the Software Development Life Cycle (SDLC), Test-Driven Development (TDD), Continuous Integration (CI), and Continuous Delivery (CD).

• Track record in agentic AI system design with multi-agent pipeline, Bedrock AgentCore, orchestration and MCP Server, RAG knowledge base, HITL architecture.

• Experience in regulatory or compliance contexts where agent outputs must be accurate, auditable and structured for legal decision-makers is a significant advantage.

• Experience working with high availability, high performance and high-security multi-data centre systems and hybrid cloud environments.

• Proficiency in at PowerShell, Python.

• Experience with Git and modern branching workflows.

• Strong understanding of container technologies (Docker, Kubernetes).

• Experience with infrastructure monitoring and observability tools.

• Strong ability to troubleshoot complex issues across system resources and application stacks.

• Experience with CI/CD pipelines (GitHub Actions, GitLab CI).

• Experience with disaster recovery planning, system backup, and restore processes.

• Knowledge of RPM-based software packaging and deployment;

• Experience implementing security controls within CI/CD pipelines and cloud-native architectures.

• Hands-on experience with security assessments, vulnerability scanning and system hardening.

• Strong understanding of network infrastructure, including firewalls, subnets, routing and access controls.

• Experience performing security assessments in government or highly regulated environments.

Added advantage

• Security certifications such as CREST, CISSP, CISM or relevant cloud security credentials.

• Experience working in an organisation that successfully implemented DevSecOps transformation.

• Hands-on experience with API security, secrets management and zero-trust architectures.

• Experience developing and deploying systems on GCC.

• Experience building on OutSystems Platform and/or experience building applications designed to operate as part of a larger shared platform.

• Legal regulatory domain familiarity: Contextual knowledge on legal, enforcement or insolvency workflows to better understand how users interact with the system and how it should help them.

Skill Level:

• Associate Consultant to Consultant