DevSecOps Engineer

Responsibilities:

• Contribute to the design, development, and implementation of our robust SDLC platform, encompassing CI/CD pipelines, automation tools, and infrastructure as code.
• Lead the implementation and optimisation of CI/CD pipelines using GitHub Actions and support our legacy Jenkins pipelines during migration.
• Implement and maintain secure build chains with software supply chain security controls, including dependency scanning, SBOM generation, and artefact signing.
• Partner with security teams to implement DevSecOps practices, including automated vulnerability scanning and compliance checks.
• Apply DevOps best practices in areas such as automated testing, configuration management, and release management.
• Collaborate with cross-functional teams to ensure seamless integration and delivery of software solutions.
• Troubleshoot and resolve complex technical issues related to the SDLC platform.
• Build comprehensive documentation, tutorials, and internal training materials for developer tools.

Requirements:

• 7+ years of experience in software development and operations, with at least 3 years focused on cloud-native DevOps practices.
• Deep understanding of SDLC principles, methodologies, and best practices.
• Hands-on experience building and maintaining CI/CD pipelines using tools like GitHub Actions, Azure DevOps, Jenkins, or similar.
• Proficiency with infrastructure as code tools such as Terraform, CloudFormation, or Ansible.
• Experience with containerization and orchestration technologies like Docker and Kubernetes.
• Experience with vulnerability scanning, SAST/DAST tools, and dependency management.
• Strong scripting skills (Python, Bash, PowerShell).
• Excellent communication and collaboration skills with a data-driven approach to decision-making.
• Commitment to the highest ethical standards.