DevSecOps Engineer

DevSecOps Engineer

Come join our vibrant and fun DevSecOps Team!

This role is focused on designing, implementing, and managing secure and scalable infrastructure across cloud platforms (AWS/Azure) and on-premises environments, with a strong emphasis on integrating security best practices throughout the software development lifecycle.

Responsibilities

• Design, implement, and manage secure and scalable infrastructure on both cloud platforms (AWS/Azure) and on-premises virtualisation environments (Hyper-V, ESXi, Proxmox VE, etc.)

• Utilise Infrastructure as Code (IaC) tools, especially Terraform, set up and maintain middleware such as NGINX and ATS

• Implement observability (o11y) stacks such as the Grafana stack

• Deploy and manage Kubernetes clusters, including k3s, k0s, and managed services like AWS EKS

• Provision and manage databases, including AWS RDS, PostgreSQL, MySQL, Oracle, and Microsoft SQL Server

• Administer and secure on-premises server infrastructure, including hypervisor management, patching, and performance tuning, collaborate with development and operations teams to troubleshoot and resolve infrastructure and security-related issues

• Monitor systems for security threats, respond to incidents, and conduct post-mortem analysis, manage and enforce access control policies across various platforms and systems

• Develop, maintain, and optimise CI/CD pipelines, with a primary focus on GitLab CI, to ensure rapid, reliable, and secure software delivery

Prerequisites

• Proven experience as a DevOps, Site Reliability, or System Engineer with a strong focus on security

• Hands-on experience managing cloud environments in either AWS or Azure (e.g., IAM, VPC, Security Groups, EC2, S3, Azure AD, NSGs)

• Solid experience in on-premises server administration and virtualisation using platforms like Hyper-V, VMware ESXi, or Proxmox VE

• Demonstrable experience with CI/CD concepts and tools, particularly GitLab CI

• Familiarity with security tools for static/dynamic analysis (SAST/DAST), container scanning, and dependency checking

• Strong understanding of networking principles, firewalls, and secure network design, a background in software development, particularly with Java, is an added advantage

• Knowledge of containerisation and orchestration technologies (Docker, Kubernetes)

• Experience with scripting languages (e.g., Python, Bash, PowerShell) for automation

• Cloud certifications (eg. AWS Certified Solutions Architect, Azure Administrator Associate)