DevSecOps Engineer

Responsibilities: • Design, build, and maintain cloud infrastructure and networking components across Azure and AWS environments. • Manage and enhance our central CI/CD tooling ecosystem (e.g., GitLab, Nexus, Nexus-IQ, SonarQube) to support product teams across the organization. • Implement automation for provisioning, configuration, and deployment using tools such as Terraform, Ansible, or similar. • Monitor, secure, and optimize CI/CD pipelines and cloud infrastructure for performance, reliability, and cost-efficiency. • Collaborate with security, networking, and application teams to ensure seamless integration and compliance with organizational policies. • Troubleshoot and resolve complex networking and infrastructure issues impacting the CI/CD platform. • Contribute to best practices and internal standards, helping to evolve the platform with scalability and maintainability in mind. • Contribute to the success of our Northstar/DP Programme. • Mentor junior engineers and provide technical guidance to other DevOps and development teams. Prerequisites: • 4–8 years of experience in DevOps, cloud infrastructure, or platform engineering roles. • Strong proficiency with Azure and/or AWS — including compute, storage, and networking (VPCs, subnets, VPN, routing, firewalls, DNS). • Hands-on experience with infrastructure-as-code (IaC) tools such as Terraform or CloudFormation. • Good understanding of CI/CD pipelines and toolchains, including experience with at least one enterprise-grade platform (e.g., GitLab, Jenkins, Azure DevOps). • Solid foundation in Linux administration, containerization (Docker, Kubernetes), and network troubleshooting. • Familiarity with monitoring, logging, and alerting tools (e.g., Prometheus, Grafana, ELK, CloudWatch). • Scripting or programming skills (Python, Bash, PowerShell, or Go). • Experience managing multi-cloud or hybrid environments. • Familiarity with Vault, SonarQube, Nexus, or similar developer platform tools. • Exposure to OIDC, SSO, and identity management in CI/CD or cloud contexts. • Understanding of DevSecOps practices, compliance, and governance in CI/CD pipelines.