DevSecOps Engineer (Cloud Infra)

About the Role

We are seeking a highly skilled DevSecOps Engineer to design, automate, and maintain secure, scalable, and resilient infrastructure and deployment pipelines. You will play a key role in integrating security into development workflows and infrastructure operations across cloud and on-premise environments.

This role requires strong expertise in cloud platforms, infrastructure automation, CI/CD, security engineering, and modern DevSecOps practices. You will work closely with engineering, operations, and security teams to drive automation, reliability, and compliance at scale.

Job description:

Key Responsibilities

• Design, implement, and maintain GitLab CI/CD pipelines to enable reliable continuous integration, delivery, and deployment.

• Perform routine infrastructure activities accurately and consistently, with minimal operational errors.

• Develop reusable and modular automation scripts to streamline recurring operational tasks.

• Apply Terraform to manage infrastructure-as-code for new deployments, configuration changes, and ongoing platform improvements.

• Deploy and configure complex systems and infrastructure components independently across IaaS, PaaS, and SaaS environments, ensuring alignment with functional, security, and policy requirements.

• Prepare implementation-ready architecture and configuration plans covering compute, storage, network, identity, security, and management components.

• Build and maintain automated scripts and tools to strengthen DevSecOps practices, including software composition analysis and container scanning.

• Manage, optimise, and troubleshoot AWS services such as ECS, ECR, Aurora, WAF, Network Firewall, Transit Gateway, ALB, NLB, and related services.

• Implement cloud security best practices, with emphasis on identity management, logging, monitoring, and incident response.

• Work closely with development and operations teams to embed security practices throughout the software development lifecycle.

• Conduct regular security assessments, vulnerability scans, and penetration testing activities to identify and remediate risks.

• Contribute to robust monitoring, alerting, observability, and Application Performance Monitoring setups, using data and analytics to troubleshoot and improve system reliability.

• Apply SRE practices such as error budgets, toil reduction, and SLI/SLO definition in day-to-day engineering work.

• Drive infrastructure tasks independently from planning through completion, proactively resolving or escalating issues before they impact delivery.

• Monitor and validate production and proof-of-concept changes, incorporate user feedback, and resolve issues in a timely manner.

• Communicate risks early and propose practical mitigation options to team leads.

• Good to have: knowledge of Microsoft Entra, Microsoft Graph API, and AWS Lambda using Python serverless development.

Requirements

• Minimum of 2 years of experience in DevSecOps and/or cloud infrastructure management.

• Hands-on experience designing and maintaining GitLab CI/CD pipelines.

• Proficiency in managing AWS services, including ECS, ECR, Aurora, WAF, Network Firewall, Transit Gateway, ALB, NLB, EC2, and Lambda.

• Strong scripting capability in Python or Bash for automation and operational efficiency.

• Practical experience using Terraform for infrastructure-as-code.

• Familiarity with containerisation technologies such as Docker and Kubernetes.

• Experience with security tools and practices, including software composition analysis and container scanning.

• Understanding of SRE principles and operational reliability practices.

• Strong analytical, troubleshooting, and problem-solving skills, with the ability to collaborate effectively in cross-functional teams.

Preferred Qualifications

• Knowledge of Microsoft Entra, Microsoft Graph API, and AWS Lambda using Python serverless development.

• AWS associate-level certification, such as AWS Certified SysOps Administrator or an equivalent relevant certification.

• Software development background with knowledge of secure coding practices.