DevSecOps Engineer

We are looking for DevSecOps Engineers to design, build, and operate secure, cloud-native, containerised infrastructure on AWS for a public sector modernisation project. The role combines infrastructure engineering, cloud security, and secure software delivery, embedding security across infrastructure and the development lifecycle. Key Responsibilities: • Set up modern cloud-native, containerised infrastructure on AWS using Infrastructure as Code (e.g. Terraform), covering VPC networking, EKS/ECS, RDS, and container registry across dev, staging, and production environments. • Apply cloud security practices and controls, including least-privilege IAM, EKS Pod Identity, network isolation, system and container hardening, mTLS, secrets management, and encryption at rest and in transit. • Build security into the development process by integrating SAST, dependency, secret, container image, and IaC scanning into GitLab CI/CD pipelines, with defined pass/fail gates. • Set up and maintain monitoring, alerting, and observability using tools such as Dynatrace or Datadog. • Support production deployments and incident resolution, including writing and maintaining runbooks. • Design, implement, and regularly test backup and restore procedures. • Integrate infrastructure with identity and access controls (e.g. enterprise directory services, SAML, OIDC, and access management platforms). • Define the secured infrastructure architecture and security baseline for the platform. • Set up and govern secure infrastructure standards, guardrails, and practices across the team. • Provide guidance and mentoring to engineers on secure infrastructure and DevSecOps practices. • Work with security teams on security reviews, compliance requirements, and remediation of findings. Requirements: Experience • Senior Consultant: 7+ years of experience, including at least 2–3 years defining secure cloud architecture or leading DevSecOps implementation. • Experience with government or public sector security and compliance requirements is an advantage. Technical Skills (Must Have): • AWS: Hands-on experience with setting up AWS cloud infrastructure. • Infrastructure as Code: Hands-on experience with Terraform (or equivalent). • Containers: Hands-on experience with Docker, Kubernetes (EKS). • CI/CD: Hands-on experience in setting up CI/CD. • Security: Hands-on experience with application and infrastructure security practices. • Security Scanning Tools: Hands-on experience with security scanning tools. • Observability: Hands-on experience with at least one observability tool. • Operations: Hands-on experience in production operations. Technical Skills (Good to Have): • Familiarity with observability tools such as Dynatrace and Datadog. • Familiarity with building, containerising, and deploying applications in Golang, Kotlin, and Next.js/TypeScript, and with operating a workflow engine such as Temporal on Kubernetes. • Identity: Experience with enterprise directory services, SAML, OIDC, and access management platforms. • Trend Micro FAM and other infrastructure/container security tooling. • OutSystems, Oracle Policy Automation (OPA) / Oracle Intelligent Advisor (OIA), Sitefinity, Oracle technologies. Soft Skills: • Security-first mindset with a practical, delivery-focused approach. • Clear documentation and communication skills. • Senior Consultant: Ability to influence engineering teams and explain security trade-offs to stakeholders.