About the RoleWe are seeking a DevSecOps Engineer to drive cloud operations, security automation, observability, and platform engineering initiatives across a modern cloud-native environment. This role will play a key part in strengthening operational excellence, enhancing automation capabilities, and ensuring secure, scalable, and reliable digital services.
You will work closely with product, engineering, infrastructure, and security teams to embed DevSecOps practices, improve cloud operations, and establish reusable platform capabilities that support long-term digital transformation objectives.
Key ResponsibilitiesPlatform Engineering & DevSecOps Enablement
- Design, build, implement, and support shared DevSecOps capabilities for digital products and platforms.
- Develop reusable platform components and engineering standards.
- Integrate observability practices into product delivery.
- Maintain supporting documentation, frameworks, and operational controls required for ongoing service delivery and business continuity.
Cloud Operations & Automation
- Implement Infrastructure as Code (IaC) and cloud automation solutions.
- Automate operational processes and create reusable infrastructure components.
- Develop automated workflows for provisioning, configuration, maintenance, and operational support.
- Optimise cloud operations to maximise efficiency, consistency, and scalability.
Security Engineering & Compliance
- Embed security-by-design principles throughout the application and infrastructure lifecycle.
- Integrate automated security validation and compliance controls into CI/CD pipelines.
- Strengthen vulnerability management, threat detection, and remediation processes.
- Ensure solutions comply with applicable security, governance, and audit requirements.
Infrastructure Reliability & Observability
- Support the reliability, performance, and availability of cloud-hosted applications and shared services.
- Diagnose and resolve issues across distributed cloud environments.
- Implement and maintain: Monitoring frameworks, Service health dashboards, Alerting standards, Operational runbooks, Observability tooling.
- Contribute to incident response, problem management, and continual service improvement.
RequirementsEducation & Experience
- Degree or Diploma in Computer Science, Computer Engineering, Electronics Engineering, Information Technology, or a related discipline.
- Relevant experience in DevSecOps, Site Reliability Engineering (SRE), Cloud Platform Engineering, or similar roles.
- Experience designing and operating security, automation, and observability solutions within cloud-native environments.
- Experience supporting highly regulated environments will be advantageous.
Observability & Monitoring
- Experience implementing observability across applications, infrastructure, and cloud services.
- Ability to collect and correlate: Metrics, Logs, Traces.
- Experience building service health dashboards, alerting frameworks, and supporting root cause analysis.
- Familiarity with enterprise observability platforms and monitoring standards.
Cloud Automation & Infrastructure as Code
- Strong experience with Infrastructure as Code, configuration management, and cloud automation.
- Experience automating: Cloud provisioning, Certificate lifecycle management, Linux patching, Compliance validation, Routine maintenance, Recovery processes.
- Ability to build reusable automation modules and operational workflows.
Security & Governance
- Experience embedding security controls within cloud platforms and CI/CD pipelines.
- Knowledge of: Vulnerability management, Secrets management, Certificate management, Identity and access controls, Security monitoring, Remediation tracking.
- Strong understanding of governance, compliance, audit, and risk management requirements.
Technical Skills
- Strong scripting and automation skills using: Python, Bash, PowerShell
- Hands-on experience with: AWS or other major cloud platforms, Docker, Kubernetes, CI/CD tools, Git-based development workflows, Terraform, Ansible.
- Familiarity with: Monitoring and logging platforms, API integrations, Secrets management solutions, Automated testing frameworks.