Principal DevSecOps Engineer

The role
JS Careers are partnering with an established financial services organisation to appoint a Principal Azure DevSecOps Engineer into its software engineering function.

This is a senior, hands-on individual contributor role focused on strengthening the security, reliability and maturity of an established Azure and Azure DevOps environment.

You’ll take ownership of key DevSecOps, software supply-chain security, audit remediation and release-engineering initiatives, working closely with senior engineers, architecture, infrastructure and security stakeholders.

Key responsibilities:

• Strengthen Azure DevOps security, access controls and pipeline security
• Implement audit-log streaming into Azure Log Analytics
• Build KQL queries, dashboards and security reporting
• Implement SAST, dependency scanning, secret scanning and related controls
• Improve branch policies, pull-request controls and release processes
• Implement SBOM generation, package governance and secure code signing
• Develop reusable YAML pipelines and automation
• Produce clear documentation, runbooks and knowledge-transfer materials

What we’re looking for:

• Strong Azure DevOps and YAML pipeline experience
• Strong Azure capability across Log Analytics, Monitor, Key Vault, managed identities and RBAC
• Practical KQL and security reporting experience
• DevSecOps and software supply-chain security experience
• PowerShell and Azure CLI automation skills
• Infrastructure as Code experience, ideally Bicep or Terraform
• Working knowledge of .NET build and release processes

Experience within financial services, insurance, banking or another regulated environment would be highly regarded, along with exposure to APRA CPS 234, ISO 27001 or similar frameworks.

Location: Sydney

If this sounds like the right opportunity for you, please apply.