Senior DevSecOps Engineer

We are looking for DevSecOps Engineer to design, build, and operate secure, cloud-native, containerised infrastructure on AWS for a public sector modernisation project. The role combines infrastructure engineering, cloud security, and secure software delivery, embedding security across infrastructure and the development lifecycle.

Key Responsibilities:

• Set up modern cloud-native, containerised infrastructure on AWS using Infrastructure as Code (e.g. Terraform), covering VPC networking, EKS/ECS, RDS, and container registry across dev, staging, and production environments
• Apply cloud security practices and controls, including least-privilege IAM, EKS Pod Identity, network isolation, system and container hardening, mTLS, secrets management, and encryption at rest and in transit
• Build security into the development process by integrating SAST, dependency, secret, container image, and IaC scanning into GitLab CI/CD pipelines, with defined pass/fail gates
• Set up and maintain monitoring, alerting, and observability using tools such as Dynatrace or Datadog
• Support production deployments and incident resolution, including writing and maintaining runbooks
• Design, implement, and regularly test backup and restore procedures
• Integrate infrastructure with identity and access controls (e.g. enterprise directory services, SAML, OIDC, and access management platforms)
• Define the secured infrastructure architecture and security baseline for the platform
• Set up and govern secure infrastructure standards, guardrails, and practices across the team
• Provide guidance and mentoring to engineers on secure infrastructure and DevSecOps practices
• Work with security teams on security reviews, compliance requirements, and remediation of findings

Requirements:

• Senior Consultant: 7+ years of experience, including at least 2–3 years defining secure cloud architecture or leading DevSecOps implementation
• Experience with government or public sector security and compliance requirements is an advantage
• AWS: Hands-on experience with setting up AWS cloud infrastructure
• Infrastructure as Code: Hands-on experience with Terraform (or equivalent)
• Containers: Hands-on experience with Docker, Kubernetes (EKS)
• CI/CD: Hands-on experience in setting up CI/CD
• Security: Hands-on experience with application and infrastructure security practices
• Security Scanning Tools: Hands-on experience with security scanning tools
• Observability: Hands-on experience with at least one observability tool
• Operations: Hands-on experience in production operations
• Familiarity with observability tools such as Dynatrace and Datadog
• Familiarity with building, containerising, and deploying applications in Golang, Kotlin, and Next.js/TypeScript, and with operating a workflow engine such as Temporal on Kubernetes
• Identity: Experience with enterprise directory services, SAML, OIDC, and access management platforms
• Trend Micro FAM and other infrastructure/container security tooling
• OutSystems, Oracle Policy Automation (OPA) / Oracle Intelligent Advisor (OIA), Sitefinity, Oracle technologies
• Security-first mindset with a practical, delivery-focused approach
• Clear documentation and communication skills
• Senior Consultant: Ability to influence engineering teams and explain security trade-offs to stakeholders