DevSecOps Engineer

Responsibilities:

• Design the architecture of Bluno's cloud and hybrid infrastructure, and the security controls built into it.
• Own infrastructure-as-code, configuration management, and multi-account governance on AWS using Terraform, Ansible or Chef, least-privilege IAM, and cost and capacity discipline.
• Provision and operate on-premises and hybrid infrastructure where data residency requires workloads to remain in-country, including hybrid connectivity and network coordination.
• Design and maintain CI/CD pipelines with security embedded rather than appended; static, dynamic, dependency, container, and infrastructure scanning tuned so gates block what matters without obstructing delivery.
• Own secrets and encryption key management across environments, and ensure credentials never reach source control.
• Own software supply chain security end-to-end: dependency and base-image hygiene, build integrity and provenance, software bill of materials and artefact signing, and a governed artefact registry.
• Implement and maintain day-to-day SOC 2 and ISO 27001 controls access reviews, logging, evidence collection, and continuous control monitoring and uphold data residency requirements.
• Own reliability alongside security: define and monitor SLOs, run observability, lead the on-call rotation, and drive incident response.