DevSecOps Engineer
Posted Updated
Description
Responsibilities:
- Design, build, and maintain cloud infrastructure and networking components across Azure and AWS environments.
- Manage and enhance our central CI/CD tooling ecosystem (e.g., GitLab, Nexus, Nexus-IQ, SonarQube) to support product teams across the organization.
- Implement automation for provisioning, configuration, and deployment using tools such as Terraform, Ansible, or similar.
- Monitor, secure, and optimize CI/CD pipelines and cloud infrastructure for performance, reliability, and cost-efficiency.
- Collaborate with security, networking, and application teams to ensure seamless integration and compliance with organizational policies.
- Troubleshoot and resolve complex networking and infrastructure issues impacting the CI/CD platform.
- Contribute to best practices and internal standards, helping to evolve the platform with scalability and maintainability in mind.
- Contribute to the success of our Northstar/DP Programme.
- Mentor junior engineers and provide technical guidance to other DevOps and development teams.
Prerequisites:
- 4–8 years of experience in DevOps, cloud infrastructure, or platform engineering roles.
- Strong proficiency with Azure and/or AWS — including compute, storage, and networking (VPCs, subnets, VPN, routing, firewalls, DNS).
- Hands-on experience with infrastructure-as-code (IaC) tools such as Terraform or CloudFormation.
- Good understanding of CI/CD pipelines and toolchains, including experience with at least one enterprise-grade platform (e.g., GitLab, Jenkins, Azure DevOps).
- Solid foundation in Linux administration, containerization (Docker, Kubernetes), and network troubleshooting.
- Familiarity with monitoring, logging, and alerting tools (e.g., Prometheus, Grafana, ELK, CloudWatch).
- Scripting or programming skills (Python, Bash, PowerShell, or Go).
- Experience managing multi-cloud or hybrid environments.
- Familiarity with Vault, SonarQube, Nexus, or similar developer platform tools.
- Exposure to OIDC, SSO, and identity management in CI/CD or cloud contexts.
- Understanding of DevSecOps practices, compliance, and governance in CI/CD pipelines.
