Principal DevSecOps Engineer - AI

Who are we?

At Finastra, we’re a global leader in financial services software, dedicated to expanding access to financial services and shaping what’s next for the industry. Our technology powers mission-critical solutions across Lending, Payments and Universal Banking, supporting over 7,000 customers, including 80% of the world’s top 50 banks, in more than 110 countries.

A senior technical SME responsible for enabling secure, automated delivery of machine learning and AI workloads. This role operates at the intersection of AI/ML engineering, product development, platform infrastructure, and cybersecurity-embedding security controls across the entire AI lifecycle, including CI/CD pipelines, model registries, vector databases, MCP services, and agent-based AI orchestration.

Key Responsibilities:

Secure AI Platform Engineering

• Architect and implement secure, scalable, and resilient CI/CD pipeline’s purpose-built for AI workloads, including LLM-based and agentic AI systems.

• Automate secure build, deployment, and promotion workflows for AI workloads.

ML/AI SecOps Integration

• Shift security left by embedding automated controls such as SAST, SCA, container/image scanning, and policy-as-code into pipelines.

• Implement AI-specific security measures, including data-poisoning safeguards, model integrity validation, and prompt-injection mitigation.

Infrastructure & Platform Security

• Work with platform engineering teams to harden vector databases, retrieval APIs, and other AI-serving infrastructure.

• Establish secure Infrastructure-as-Code (IaC) templates, GitOps workflows, and micro-segmented identity patterns using secrets-management tools such as Vault.

• Ensure multi-region, fault-tolerant, and security-hardened deployment architectures for AI platforms.

Model Supply Chain Security

• Implement provenance, attestation, and traceability for datasets, training pipelines, and model artifacts.

• Protect the end-to-end AI supply chain-from data ingestion through model deployment-to prevent tampering, data integrity issues, or malicious model substitution.

AI Observability & Incident Response

• Collaborate with AI Platform and Security teams to develop monitoring and detection capabilities for AI-specific threats, including adversarial examples, model extraction attempts, drift anomalies, and suspicious agent behaviors.

• Contribute to AI-aware incident response procedures and threat-hunting playbooks.

Governance & Compliance

• Champion the adoption of secure AI frameworks (e.g., NIST AI RMF) and define guardrails for responsible AI operations.

• Establish and maintain an AI Bill of Materials (AI-BOM) to manage risk associated with third-party models, components, and datasets.

Required Qualifications:

· 8-10 yrs DevSecOps experience, ML/AI SecOps, supply chain security.

· Cloud Security expertise in securing Azure, AWS or GCP environment, particularly Kubernetes/Service Mesh, and their AI services

· Mandatory Experience Python/Go, or similar programming language, along with advanced knowledge of IaC (Terraform) and GitOps patterns

Preferred Skills:

• Experience with provenance/attestation frameworks (e.g., SLSA, Sigstore).

• Cloud security certifications (Azure, AWS, GCP).

• Hands-on experience with KMS, secrets-management platforms, and hardware-rooted trust technologies.

We are proud to offer a range of incentives to our employees worldwide. These benefits are available to everyone, regardless of grade, and reflect the values we stand for:

Flexibility: Enjoy unlimited vacation, subject to local regulations and business priorities. Benefit from hybrid working arrangements and inclusive policies such as paid time off for voting, bereavement, and sick leave.

Well-being: Access confidential one-to-one support through our Employee Assistance Program, connect with our network of Wellbeing Champions and Gather Groups, and take part in monthly events and initiatives designed to help you thrive-inside and outside of work.

Health & Financial Security: Medical, life and disability insurance, retirement plans, lifestyle, and other benefits.*

Sustainability: Paid time off for volunteering and donation-matching opportunities to support causes that matter to you.

Inclusion: Get involved in our inclusion communities, such as Count Me In, Culture@Finastra, Proud@Finastra, Disabilities@Finastra, and Women@Finastra-open to everyone who wants to participate and contribute.

Career Development: Access online learning and accredited courses through our Skills & Career Navigator tool.

Recognition: Take part in our global recognition program, Finastra Celebrates, and share your voice through regular employee surveys that help shape our culture and ways of working.

*Specific benefits may vary by location.

At Finastra, each individual is unique-bringing their own ideas, perspectives, cultural backgrounds, and experiences. We learn from one another, value what makes us different, and create an environment where everyone feels included, supported, and able to be their authentic selves.

Be unique. Be exceptional. Help us make a difference at Finastra.