DevSecOps Engineer – Cloud & Security Automation

About the role

The DevSecOps Engineer will design, build and operate secure, automated delivery pipelines and environments for Agile teams. You will ensure high‑availability cloud and on‑premise services while embedding security and compliance early in the software lifecycle.

Key responsibilities

• Build and maintain CI/CD pipelines supporting Agile teams and ARTs.
• Provision and manage development, test, staging and production environments using IaC tools such as Terraform, Helmfile, Ansible and Kubernetes manifests.
• Ensure high availability and resilience in cloud and on‑premise environments through zero‑downtime deployments, blue/green and canary release strategies.
• Automate code quality, security scanning, release management and monitoring to align with Lean‑Agile principles.
• Collaborate with System Architects, Release Train Engineers and agile teams to define delivery practices and support PI planning.
• Integrate shift‑left security practices, including secrets management and compliance checks, into CI pipelines.
• Implement observability (monitoring, logs, traces) and track DORA metrics such as deployment frequency and MTTR.
• Work with InfoSec and Compliance teams on security audits, risk assessments and disaster‑recovery planning.

Required profile

• Bachelor’s degree in Computer Science, Information Technology or a recognized engineering discipline.
• Demonstrated ownership of the DevSecOps mindset and experience guiding development teams.
• Strong communication skills in English and ability to work in a multicultural, multinational environment.

Required skills

• Linux operating system administration and Bash scripting.
• Infrastructure‑as‑Code tools: Terraform, Helmfile, Ansible, Kubernetes manifests.
• Container technologies: Docker, Kaniko, OCI‑based containers, Kubernetes orchestration.
• CI/CD platforms and tools such as Jenkins, Git.
• Secrets and configuration management in Kubernetes environments.
• Observability and monitoring tools, including OpenTelemetry.
• Cloud platforms: Azure, Amazon Web Services, Google Cloud.
• Proactive monitoring, incident response and security threat mitigation.