DevSecOps (AWS, Terraform, Ansible, Docker, Kubernetes)

About the role

The DevSecOps Engineer will strengthen cloud infrastructure capabilities and operational excellence by integrating monitoring, security, and automation practices into new product and infrastructure development. This role is crucial for embedding product-centric thinking, establishing robust observability frameworks, automating security controls, and optimising cloud operations at scale while maintaining compliance with government standards.

Key responsibilities

• Plan, design, implement, and maintain shared DevSecOps capabilities for in-house and newly introduced digital products, including building reusable platform components and integrating observability into product delivery
• Maintain supporting frameworks, documentation, and operational controls required for business continuity and ongoing digital transformation
• Establish essential automation capabilities, including full-scale deployment of Infrastructure as Code (IaC) and automating cloud operational processes
• Create reusable infrastructure products that enable product teams to transform or build solutions more efficiently
• Develop automated operational workflows to ensure consistent, secure, and efficient cloud operations
• Embed security-by-design principles throughout the product and infrastructure lifecycle
• Automate security checks and compliance controls within CI/CD pipelines
• Strengthen vulnerability management and threat-detection capabilities and support timely remediation activities
• Diagnose complex issues across distributed environments and improve availability and performance through monitoring and automation
• Contribute to incident response and problem management, including ownership of service health dashboards, alerting standards, operational runbooks, and continuous service improvement initiatives

About you

• Degree or Diploma in Computer Science, Computer Engineering, Electronics Engineering, Information Technology, or related disciplines
• Relevant experience in DevSecOps Engineering, Site Reliability Engineering (SRE), Cloud Platform Engineering, or similar technical roles
• Hands-on experience designing and operating automation, observability, and security capabilities in cloud-native environments
• Hands-on experience implementing observability across applications, infrastructure, and distributed cloud services, including metrics collection and correlation, log aggregation and analysis, distributed tracing, service health dashboard design, alert strategy definition, and root cause analysis support
• Ability to establish consistent monitoring standards across multiple product teams
• Proficiency in Infrastructure as Code (IaC), Configuration Management, and Cloud Automation
• Experience with cloud provisioning automation, certificate lifecycle management, Linux patch automation using Ansible, routine maintenance automation, compliance checks, and disaster recovery automation
• Capability to create reusable modules and automation workflows that improve consistency, reduce manual effort, and enable adoption of approved cloud patterns
• Experience implementing security controls within cloud platforms and CI/CD pipelines, including vulnerability management, secrets management, certificate management, identity and access controls, security monitoring, and remediation tracking
• Strong understanding of government security policies, regulatory requirements, risk management frameworks, and audit evidence requirements
• Strong proficiency in scripting and automation (Python, Bash, PowerShell), cloud and containerisation (AWS preferred, Docker, Kubernetes), DevOps and infrastructure (Terraform, Ansible, Git-based workflows, CI/CD platforms), monitoring and security (monitoring platforms, logging platforms, API integrations, secrets management, automated testing frameworks)